Vulnerability Details : CVE-2021-4149
Potential exploit
A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.
Vulnerability category: Denial of service
Products affected by CVE-2021-4149
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
Threat overview for CVE-2021-4149
Top countries where our scanners detected CVE-2021-4149
Top open port discovered on systems with this issue
49152
IPs affected by CVE-2021-4149 418,476
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2021-4149!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2021-4149
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 27 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-4149
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST | |
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2021-4149
-
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.Assigned by:
- nvd@nist.gov (Primary)
- secalert@redhat.com (Secondary)
References for CVE-2021-4149
-
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
[SECURITY] [DLA 3065-1] linux security updateMailing List;Third Party Advisory
-
https://lkml.org/lkml/2021/10/18/885
LKML: Greg Kroah-Hartman: [PATCH 5.14 030/151] btrfs: unlock newly allocated extent buffer after errorExploit;Mailing List;Patch;Third Party Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=2026485
2026485 – (CVE-2021-4149) CVE-2021-4149 kernel: Improper lock operation in btrfsIssue Tracking;Third Party Advisory
-
https://lkml.org/lkml/2021/9/13/2565
LKML: Hao Sun: WARNING: lock held when returning to user space in __btrfs_tree_lockExploit;Mailing List;Third Party Advisory
Jump to