CVE-2021-47433

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-47433
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47433.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-47433
Related
Published
2024-05-22T07:15:08Z
Modified
2024-09-18T03:17:27.857018Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix abort logic in btrfsreplacefile_extents

Error injection testing uncovered a case where we'd end up with a corrupt file system with a missing extent in the middle of a file. This occurs because the if statement to decide if we should abort is wrong.

The only way we would abort in this case is if we got a ret != -EOPNOTSUPP and we called from the file clone code. However the prealloc code uses this path too. Instead we need to abort if there is an error, and the only error we don't abort on is -EOPNOTSUPP and only if we came from the clone file code.

References

Affected packages

Debian:11 / linux

Package

Name
linux
Purl
pkg:deb/debian/linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.10.84-1

Affected versions

5.*

5.10.46-4
5.10.46-5
5.10.70-1~bpo10+1
5.10.70-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / linux

Package

Name
linux
Purl
pkg:deb/debian/linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.16-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / linux

Package

Name
linux
Purl
pkg:deb/debian/linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.16-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}