← Database

CVE-2021-47351

HIGH CVSS: 7.8 Published: 2024-05-21 Modified: 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattr_{set|get} and listxattr operations UBIFS may occur some problems with concurrent xattr_{set|get} and listxattr operations, such as assertion failure, memory corruption, stale xattr value[1]. Fix it by importing a new rw-lock in @ubifs_inode to serilize write operations on xattr, concurrent read operations are still effective, just like ext4. [1] https://lore.kernel.org/linux-mtd/[email protected]

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-617, CWE-787

References