CVE-2021-47351: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattr_{set|get} and listxattr operations UBIFS may occur some problems with concurrent xattr_{set|get} and listxattr operations, such as assertion failure, memory corruption, stale xattr value[1]. Fix it by importing a new rw-lock in @ubifs_inode to serilize write operations on xattr, concurrent read operations are still effective, just like ext4. [1] https://lore.kernel.org/linux-mtd/20200630130438.141649-1-houtao1@huawei.com

Affected products

• Linux Linux Kernel: from 2.6.27, before 5.4.133 (fixed in 5.4.133); from 5.5, before 5.10.51 (fixed in 5.10.51); from 5.11, before 5.12.18 (fixed in 5.12.18); from 5.13, before 5.13.3 (fixed in 5.13.3)

Published 2024-05-21. Last modified 2026-08-04.