CVE-2021-4150: Linux Kernel
Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.
A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when device_add call fails when adding a partition to the disk.
Affected products
- Linux Linux Kernel: before 5.15 (fixed in 5.15); version 5.15 only
Published 2022-03-23. Last modified 2026-06-17.