CVE-2021-40490CWE-362

CVE-2021-40490

High · published September 3, 2021

CVSS v3.1
7.0
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2021-09-03T05:15Z
Affected products (26)
ProductVersionsFixed in
netapp/solidfire_baseboard_management_controllerall versions—
linux/linux_kernel≥ 3.8, < 4.4.2844.4.284
linux/linux_kernel≥ 4.5, < 4.9.2834.9.283
linux/linux_kernel≥ 4.10, < 4.14.2474.14.247
linux/linux_kernel≥ 4.15, < 4.19.2074.19.207
linux/linux_kernel≥ 4.20, < 5.4.1455.4.145
linux/linux_kernel≥ 5.5, < 5.10.635.10.63
linux/linux_kernel≥ 5.11, < 5.13.155.13.15
linux/linux_kernel≥ 5.14, < 5.14.25.14.2
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
netapp/aff_a250_firmwareall versions—
netapp/fas_500f_firmwareall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h300e_firmwareall versions—
netapp/h500e_firmwareall versions—
netapp/h700e_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h410c_firmwareall versions—
netapp/h610c_firmwareall versions—
netapp/h610s_firmwareall versions—
netapp/h615c_firmwareall versions—
References (14)
https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=9e445093e523f3277081314c864f708fd4bd34aa · [email protected]https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html · [email protected]https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6VS2DLGT7TK7URKAS2KWJL3S533SGVA/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJGX3DMJT6MRBW2XEF3TWVHYWZW3DG3N/ · [email protected]https://security.netapp.com/advisory/ntap-20211004-0001/ · [email protected]https://www.debian.org/security/2021/dsa-4978 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=9e445093e523f3277081314c864f708fd4bd34aa · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6VS2DLGT7TK7URKAS2KWJL3S533SGVA/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJGX3DMJT6MRBW2XEF3TWVHYWZW3DG3N/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20211004-0001/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2021/dsa-4978 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 03 SEP 00:50Z
    A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13
    cvelistv5