CVE-2021-46923
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-46923
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-46923.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-46923
- Related
- Published
- 2024-02-27T10:15:07Z
- Modified
- 2024-09-11T02:00:05Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fs/mountsetattr: always cleanup mountkattr
Make sure that finishmountkattr() is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We returned early if path lookup failed thereby risking to leak an additional reference we took when building mountkattr when an idmapped mount was requested.
- References
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source