Skip to content
Sign in
8.8 High

CVE-2021-3492 Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults…

Description

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

Affected products and versions

Product Affected versions Fixed in
Linux kernel 5.8 earliest → < 5.8.0-50.56 5.8.0-50.56
Linux kernel 5.4 earliest → < 5.4.0-72.80 5.4.0-72.80

Other CVEs of Linux kernel

The 3 CVEs of Linux kernel →
CVE-2021-3493 Linux Kernel Privilege Escalation Vulnerability 8.8 High CVE-2019-15794 Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3… 7.1 High
Track this CVE