High · published April 20, 2021
An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 4.19.191 | 4.19.191 |
| linux/linux_kernel | ≥ 4.20, < 5.4.118 | 5.4.118 |
| linux/linux_kernel | ≥ 5.5, < 5.10.36 | 5.10.36 |
| linux/linux_kernel | ≥ 5.11, < 5.11.20 | 5.11.20 |
| linux/linux_kernel | ≥ 5.12, < 5.12.3 | 5.12.3 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| debian/debian_linux | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/solidfire_baseboard_management_controller_firmware | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h300e_firmware | all versions | — |
| netapp/h500e_firmware | all versions | — |
| netapp/h700e_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |