CVE-2021-20321

Katalog CVE

CVSS 4.7 · Medium EPSS 0,22%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, redhat enterprise linux +1 lainnya. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.

Rincian

Terbit di NVD

18 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2013242 issue tracking · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5096 advisory pihak ketiga
• https://lore.kernel.org/all/20211011134508.748956131%40linuxfoundation.org/