CVE-2021-3739: Fedoraproject Fedora

High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.

Affected products

• Fedoraproject Fedora: version 34 only
• Linux Linux Kernel: from 4.20, before 5.4.144 (fixed in 5.4.144); from 5.5, before 5.10.62 (fixed in 5.10.62); from 5.11, before 5.13.14 (fixed in 5.13.14); from 5.14, before 5.14.1 (fixed in 5.14.1)
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified

Published 2022-03-10. Last modified 2026-09-01.