CVE-2021-45469

In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.55% chance of exploitation in the next 30 days, 44th percentile

Published

2021-12-23

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://bugzilla.kernel.org/show_bug.cgi?id=215235

References

• CVE Record
• NVD entry

Related

• CVE-2021-45468
• CVE-2021-45485
• CVE-2021-45467
• CVE-2021-45511
• CVE-2021-45466
• CVE-2021-45608