CVE-2021-47351 in Linuxinformation

Résumé

par MITRE • 21/05/2024

In the Linux kernel, the following vulnerability has been resolved:

ubifs: Fix races between xattr_{set|get} and listxattr operations

UBIFS may occur some problems with concurrent xattr_{set|get} and
listxattr operations, such as assertion failure, memory corruption, stale xattr value[1].

Fix it by importing a new rw-lock in @ubifs_inode to serilize write operations on xattr, concurrent read operations are still effective, just like ext4.

[1] https://lore.kernel.org/linux-mtd/[email protected]

Be aware that VulDB is the high quality source for vulnerability data.

Sources

Do you know our Splunk app?

Download it now for free!