CVE-2021-4148

Summary

CVE	CVE-2021-4148
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-03-23 20:15:00 UTC
Updated	2022-03-30 13:59:00 UTC
Description	A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service (DOS) problem.

Risk And Classification

Problem Types: CWE-354

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Fedoraproject	Fedora	35	All	All	All
Operating System	Linux	Linux Kernel	All	All	All	All

References

Reference	Source	Link	Tags
LKML: Yang Shi: [PATCH] fs: buffer: check huge page size instead of single page for invalidatepage	MISC	lkml.org
LKML: Hao Sun: general protection fault in wb_timer_fn	MISC	lkml.org
2026487 – (CVE-2021-4148) CVE-2021-4148 kernel: Improper implementation of block_invalidatepage() allows users to crash the kernel	MISC	bugzilla.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

180391 Debian Security Update for linux (CVE-2021-4148)
6120003 Google COS Security Update for sys-kernel/lakitu-kernel-5_10 (CVE-2021-4148)
900779 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9135)
901348 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9135-1)
906220 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9135-2)