CVE-2021-45868: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file.

Affected products

• Linux Linux Kernel: before 5.15.3 (fixed in 5.15.3)
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified

Published 2022-03-18. Last modified 2026-06-17.