Vulnerability in Linux
CVE-2021-46923
In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always cleanup mount_kattr Make sure that finish_mount_kattr() is called after mount_kattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We returned early if path lookup failed thereby risking to leak an additional reference we took when building mount_kattr when an idmapped mount was requested.
EPSS: 0.002 (11.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Linux — versions 9caccd41541a6f7d6279928d9f971f6642c361af, 5.12, 0
- Linux Linux_kernel
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2021-46923?
- CVE-2021-46923 is a medium-severity vulnerability in Linux, classified under Exposure of Resource to Wrong Sphere. CVSS score: 5.5/10. Published 2024-02-27.
- How severe is CVE-2021-46923?
- Medium severity. CVSS v3 base score is 5.5 out of 10.