CVE-2021-28964

Related Vulnerabilities: CVE-2021-28964  

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.

Description

The MITRE CVE dictionary describes this issue as:

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.

Additional Information

  • Bugzilla 1941804: CVE-2021-28964 kernel: race condition in get_old_root function in fs/btrfs/ctree.c because of a lack of locking on an extent buffer before a cloning operation
  • CWE-362->CWE-667: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') leads to Improper Locking
  • FAQ: Frequently asked questions about CVE-2021-28964