NetSight
medium4.7

CVE-2021-28964

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8.

Impact

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.11.8
FedoraprojectFedora
Versions 32, 33, 34
DebianDebian Linux
Version 9.0
NetappCloud Backup
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
NetappAff A250 Firmware
All versions
NetappFas 500f Firmware
All versions

Weakness classification

References