CVE-2021-3739
Summary
| CVE | CVE-2021-3739 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-03-10 17:43:00 UTC |
| Updated | 2023-11-09 14:44:00 UTC |
| Description | A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability. |
Risk And Classification
Problem Types: CWE-476
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - Linux kernel: fs/btrfs: null-ptr-dereference bug in btrfs_rm_device in fs/btrfs/volumes.c | MISC | www.openwall.com | |
| btrfs: fix NULL pointer dereference when deleting device by invalid id · torvalds/linux@e4571b8 · GitHub | MISC | github.com | |
| 1997958 – (CVE-2021-3739) CVE-2021-3739 kernel: null-ptr-dereference bug in btrfs_rm_device in fs/btrfs/volumes.c | MISC | bugzilla.redhat.com | |
| CVE-2021-3739 | Ubuntu | MISC | ubuntu.com | |
| kernel/git/torvalds/linux.git - Linux kernel source tree | MISC | git.kernel.org | |
| CVE-2021-3739 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159401 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9457)
- 159405 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9461)
- 159421 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9474)
- 159422 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9475)
- 178809 Debian Security Update for linux (DSA 4978-1)
- 182052 Debian Security Update for linux (CVE-2021-3739)
- 198540 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5113-1)
- 198542 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5115-1)
- 198543 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5117-1)
- 198563 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5137-1)
- 198565 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5137-2)
- 353155 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-005
- 6140414 AWS Bottlerocket Security Update for kernel (GHSA-mgpp-7p6c-ph3c)
- 751137 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:1271-1)
- 751160 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:3179-1)
- 751170 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:3205-1)
- 900740 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (8936)
- 905812 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (8936-1)