CVE-2021-3739CWE-476

CVE-2021-3739

High · published March 10, 2022

CVSS v3.1
7.1
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00616 · 48.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2022-03-10T22:43Z
Affected products (13)
ProductVersionsFixed in
linux/linux_kernel≥ 4.20, < 5.4.1445.4.144
linux/linux_kernel≥ 5.5, < 5.10.625.10.62
linux/linux_kernel≥ 5.11, < 5.13.145.13.14
linux/linux_kernel≥ 5.14, < 5.14.15.14.1
fedoraproject/fedoraall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h300e_firmwareall versions—
netapp/h500e_firmwareall versions—
netapp/h700e_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h410c_firmwareall versions—
References (12)
https://bugzilla.redhat.com/show_bug.cgi?id=1997958 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e4571b8c5e9ffa1e85c0c671995bd4dcc5c75091 · [email protected]https://github.com/torvalds/linux/commit/e4571b8c5e9ffa1e85c0c671995bd4dcc5c75091 · [email protected]https://security.netapp.com/advisory/ntap-20220407-0006/ · [email protected]https://ubuntu.com/security/CVE-2021-3739 · [email protected]https://www.openwall.com/lists/oss-security/2021/08/25/3 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=1997958 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e4571b8c5e9ffa1e85c0c671995bd4dcc5c75091 · af854a3a-2127-422b-91ae-364da2661108https://github.com/torvalds/linux/commit/e4571b8c5e9ffa1e85c0c671995bd4dcc5c75091 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20220407-0006/ · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/CVE-2021-3739 · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2021/08/25/3 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 07 MAR 15:19Z
    A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires…
    cvelistv5