CVE-2021-4150: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when device_add call fails when adding a partition to the disk.

Affected products

  • Linux Linux Kernel: before 5.15 (fixed in 5.15); version 5.15 only

Published 2022-03-23. Last modified 2026-06-17.