Riskcovery

CVE-2021-47342

ext4: fix possible UAF when remounting r/o a mmp-protected file system

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 23, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix possible UAF when remounting r/o a mmp-protected file system

After commit 618f003199c6 ("ext4: fix memory leak in ext4_fill_super"), after the file system is remounted read-only, there is a race where the kmmpd thread can exit, causing sbi->s_mmp_tsk to point at freed memory, which the call to ext4_stop_mmpd() can trip over.

Fix this by only allowing kmmpd() to exit when it is stopped via ext4_stop_mmpd().

Bug-Report-Link: <20210629143603.2166962-1-yebin10@huawei.com>

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5e4f5138bd8522ebe231a137682d3857209a2c07 to before b663890d854403e566169f7e90aed5cd6ff64f6bAffected
  • eb7b40d9d3785f7a131fb0b1f89bb6efa46c1833 to before 7ed572cdf11081f8f9e07abd4bea56a3f2c4edbdAffected
  • 618f003199c6188e01472b03cdbba227f1dc5f24 to before 61bb4a1c417e5b95d9edb4f887f131de32e419cbAffected
  • cecfdb9cf9a700d1037066173abac0617f6788dfAffected
  • 5.12.18 to before 5.13Affected
LinuxLinux
  • 5.10.51 to before 5.10.77Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.