CVE-2021-4149
MEDIUMLinux Kernel < 5.15 - Denial of Service via Btrfs Improper Locking
Title source: llmDescription
A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.
References (4)
Core 4
Core References
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=2026485
Exploit, Mailing List, Patch, Third Party Advisory x_refsource_misc
https://lkml.org/lkml/2021/10/18/885
Exploit, Mailing List, Third Party Advisory x_refsource_misc
https://lkml.org/lkml/2021/9/13/2565
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
Scores
CVSS v3
5.5
EPSS
0.0040
EPSS Percentile
31.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-667
Status
published
Products (3)
debian/debian_linux
9.0
linux/linux_kernel
5.15 (6 CPE variants)
linux/linux_kernel
< 5.15
Published
Mar 23, 2022
Tracked Since
Feb 18, 2026