CVE-2021-47254
published 2024-05-21CVE-2021-47254: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked under…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to
remove the glock from the lru list in __gfs2_glock_put().
On the shrink scan path, the same flag is cleared under lru_lock but because
of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the
put side can be made without deleting the glock from the lru list.
Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to
ensure correct behavior on both sides - clear GLF_LRU after list_del under
lru_lock.
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.46-1 (bookworm) | linux 5.10.46-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 4.14.123 < 4.14.238 | 4.14.238 |
| linux | linux | >= 4.19.47 < 4.19.196 | 4.19.196 |
| linux | linux | >= 4.4.181 < 4.4.274 | 4.4.274 |
| linux | linux | >= 4.9.180 < 4.9.274 | 4.9.274 |
| linux | linux | >= 5.0.20 < 5.1 | 5.1 |
| linux | linux | >= 5.1.6 < 5.2 | 5.2 |
| linux | linux | >= 6948c6bc17d666663a84c124b3176039e64a58f4 < 38ce329534500bf4ae71f81df6a37a406cf187b4 | 38ce329534500bf4ae71f81df6a37a406cf187b4 |
| linux | linux | >= 762bb3528249604bc680a9df635e8995740176de < 0364742decb0f02bc183404868b82896f7992595 | 0364742decb0f02bc183404868b82896f7992595 |
| linux | linux | >= 7881ef3f33bb80f459ea6020d1e021fc524a6348 < 86fd5b27db743a0ce0cc245e3a34813b2aa6ec1d | 86fd5b27db743a0ce0cc245e3a34813b2aa6ec1d |
| linux | linux | >= 7881ef3f33bb80f459ea6020d1e021fc524a6348 < a61156314b66456ab6a291ed5deba1ebd002ab3c | a61156314b66456ab6a291ed5deba1ebd002ab3c |
| linux | linux | >= 7881ef3f33bb80f459ea6020d1e021fc524a6348 < e87ef30fe73e7e10d2c85bdcc778dcec24dca553 | e87ef30fe73e7e10d2c85bdcc778dcec24dca553 |
| linux | linux | >= 7881ef3f33bb80f459ea6020d1e021fc524a6348 < 1ab19c5de4c537ec0d9b21020395a5b5a6c059b2 | 1ab19c5de4c537ec0d9b21020395a5b5a6c059b2 |
| linux | linux | >= b568ed385a18c0ddbe41862b69088b636550a04f < 92869945cc5b78ee8a1ef90336fe070893e3458a | 92869945cc5b78ee8a1ef90336fe070893e3458a |
| linux | linux | >= bac8520892812dada1ac93f27d96317470d24b1f < 094bf5670e762afa243d2c41a5c4ab71c7447bf4 | 094bf5670e762afa243d2c41a5c4ab71c7447bf4 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 4.4.0-279.313 | 4.4.0-279.313 |
| linux | linux_kernel | >= 4.14.123 < 4.14.238 | 4.14.238 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel (FIPS) vulnerabilities
vendor_ubuntu·2026-04-02·CVSS 5.5
CVE-2025-21735 [MEDIUM] Linux kernel (FIPS) vulnerabilities
Title: Linux kernel (FIPS) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- GPU drivers;
- BTRFS file system;
- GFS2 file system;
- UDF file system;
- NFC subsystem;
- Network traffic control;
(CVE-2021-47142, CVE-2021-47145, CVE-2021-47254, CVE-2024-46777,
CVE-2025-21735, CVE-2026-23060, CVE-2026-23074)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reins
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2026-04-01·CVSS 5.5
CVE-2026-23060 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- GPU drivers;
- BTRFS file system;
- GFS2 file system;
- UDF file system;
- NFC subsystem;
- Network traffic control;
(CVE-2021-47142, CVE-2021-47145, CVE-2021-47254, CVE-2024-46777,
CVE-2025-21735, CVE-2026-23060, CVE-2026-23074)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall al
Red Hat
kernel: gfs2: Fix use-after-free in gfs2_glock_shrink_scan
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2021-47254 [HIGH] CWE-416 kernel: gfs2: Fix use-after-free in gfs2_glock_shrink_scan
kernel: gfs2: Fix use-after-free in gfs2_glock_shrink_scan
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to
remove the glock from the lru list in __gfs2_glock_put().
On the shrink scan path, the same flag is cleared under lru_lock but because
of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the
put side can be made without deleting the glock from the lru list.
Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to
ensure correct behavior on both sides - clear GLF_LRU after list_del under
lru_lock.
A vulnerability was found in Linux kernel's GFS2 file system, in the gfs2_glock_shrink_scan function
Debian
CVE-2021-47254: linux - In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix u...
vendor_debian·2021·CVSS 7.8
CVE-2021-47254 [HIGH] CVE-2021-47254: linux - In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix u...
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put(). On the shrink scan path, the same flag is cleared under lru_lock but because of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the put side can be made without deleting the glock from the lru list. Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both sides - clear GLF_LRU after list_del under lru_lock.
Scope: local
bookworm: resolved (fixed in 5.10.46-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.10.46-1)
sid: resolved (fixed in 5.10.46
OSV
linux-fips vulnerabilities
osv·2026-04-02·CVSS 5.5
CVE-2021-47142 [MEDIUM] linux-fips vulnerabilities
linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- GPU drivers;
- BTRFS file system;
- GFS2 file system;
- UDF file system;
- NFC subsystem;
- Network traffic control;
(CVE-2021-47142, CVE-2021-47145, CVE-2021-47254, CVE-2024-46777,
CVE-2025-21735, CVE-2026-23060, CVE-2026-23074)
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2026-04-01·CVSS 5.5
CVE-2021-47142 [MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- GPU drivers;
- BTRFS file system;
- GFS2 file system;
- UDF file system;
- NFC subsystem;
- Network traffic control;
(CVE-2021-47142, CVE-2021-47145, CVE-2021-47254, CVE-2024-46777,
CVE-2025-21735, CVE-2026-23060, CVE-2026-23074)
OSV
CVE-2021-47254: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked und
osv·2024-05-21·CVSS 7.8
CVE-2021-47254 [HIGH] CVE-2021-47254: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked und
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put(). On the shrink scan path, the same flag is cleared under lru_lock but because of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the put side can be made without deleting the glock from the lru list. Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both sides - clear GLF_LRU after list_del under lru_lock.
GHSA
GHSA-g3v4-6rhh-7539: In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
The GLF_LRU flag is checked u
ghsa_unreviewed·2024-05-21
CVE-2021-47254 [HIGH] CWE-416 GHSA-g3v4-6rhh-7539: In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
The GLF_LRU flag is checked u
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to
remove the glock from the lru list in __gfs2_glock_put().
On the shrink scan path, the same flag is cleared under lru_lock but because
of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the
put side can be made without deleting the glock from the lru list.
Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to
ensure correct behavior on both sides - clear GLF_LRU after list_del under
lru_lock.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0364742decb0f02bc183404868b82896f7992595https://git.kernel.org/stable/c/094bf5670e762afa243d2c41a5c4ab71c7447bf4https://git.kernel.org/stable/c/1ab19c5de4c537ec0d9b21020395a5b5a6c059b2https://git.kernel.org/stable/c/38ce329534500bf4ae71f81df6a37a406cf187b4https://git.kernel.org/stable/c/86fd5b27db743a0ce0cc245e3a34813b2aa6ec1dhttps://git.kernel.org/stable/c/92869945cc5b78ee8a1ef90336fe070893e3458ahttps://git.kernel.org/stable/c/a61156314b66456ab6a291ed5deba1ebd002ab3chttps://git.kernel.org/stable/c/e87ef30fe73e7e10d2c85bdcc778dcec24dca553https://git.kernel.org/stable/c/0364742decb0f02bc183404868b82896f7992595https://git.kernel.org/stable/c/094bf5670e762afa243d2c41a5c4ab71c7447bf4https://git.kernel.org/stable/c/1ab19c5de4c537ec0d9b21020395a5b5a6c059b2https://git.kernel.org/stable/c/38ce329534500bf4ae71f81df6a37a406cf187b4https://git.kernel.org/stable/c/86fd5b27db743a0ce0cc245e3a34813b2aa6ec1dhttps://git.kernel.org/stable/c/92869945cc5b78ee8a1ef90336fe070893e3458ahttps://git.kernel.org/stable/c/a61156314b66456ab6a291ed5deba1ebd002ab3chttps://git.kernel.org/stable/c/e87ef30fe73e7e10d2c85bdcc778dcec24dca553
2024-05-21
Published