CVE - CVE-2021-47351

CVE-ID
CVE-2021-47351	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattr_{set\|get} and listxattr operations UBIFS may occur some problems with concurrent xattr_{set\|get} and listxattr operations, such as assertion failure, memory corruption, stale xattr value[1]. Fix it by importing a new rw-lock in @ubifs_inode to serilize write operations on xattr, concurrent read operations are still effective, just like ext4. [1] https://lore.kernel.org/linux-mtd/20200630130438.141649-1-houtao1@huawei.com
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6 URL:https://git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6 MISC:https://git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08 URL:https://git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08 MISC:https://git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82 URL:https://git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82 MISC:https://git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386 URL:https://git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386 MISC:https://git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5 URL:https://git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)