Back to CVE Browser

CVE-2021-3492

HIGH

8.8

CVSS Severity Score

EPSS Score0.0900%

EPSS Percentile44.11th

PublishedApr 17, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

Affected Platforms (CPE)

💻

Canonical

Ubuntu Linux

< 18.04

💻

Canonical

Ubuntu Linux

>= 18.04.1 and < 20.04

💻

Canonical

Ubuntu Linux

< 20.10

References & Advisories

🔗 http://packetstormsecurity.com/files/162614/Kernel-Live-Patch-Security-Notice-LSN-0077-1.html

🔗 https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=25c891a949bf918b59cbc6e4932015ba4c35c333

🔗 https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=8fee52ab9da87d82bc6de9ebb3480fff9b4d53e6

🔗 https://ubuntu.com/security/notices/USN-4917-1

🔗 https://www.openwall.com/lists/oss-security/2021/04/16/2

🔗 https://www.zerodayinitiative.com/advisories/ZDI-21-422/

🔗 http://packetstormsecurity.com/files/162614/Kernel-Live-Patch-Security-Notice-LSN-0077-1.html

🔗 https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=25c891a949bf918b59cbc6e4932015ba4c35c333

Related Vulnerabilities

CVE-2018-66349.8

A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maint...

CVE-2021-344239.8

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before ve...

CVE-2021-34938.8

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file cap...

CVE-2019-128817.8

i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local us...