Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2021-4155: XFS Filesystem Allows Local Data Leaks
CVE-2021-4155 · published 4 years ago
Summary
A security issue in the XFS filesystem could allow a local attacker to access sensitive data that they shouldn't be able to see. This is a concern for systems using XFS, as it could lead to unauthorized data exposure. To mitigate this risk, ensure that your XFS filesystem is updated with the latest security patches.
What to do
- Update canonical linux-aws to version 4.4.0-1116.122.
- Update canonical linux-azure to version 4.15.0-1131.144~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-237.271~14.04.1.
- Update canonical linux to version 4.4.0-237.271.
- Update canonical linux-aws to version 4.4.0-1154.169.
- Update canonical linux-aws-hwe to version 4.15.0-1120.128~16.04.1.
- Update canonical linux-azure to version 4.15.0-1131.144~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1116.130~16.04.1.
- Update canonical linux-hwe to version 4.15.0-169.177~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1117.127.
- Update canonical linux-oracle to version 4.15.0-1087.95~16.04.1.
- Update canonical linux-fips to version 4.4.0-1086.93.
- Update canonical linux to version 4.15.0-169.177.
- Update canonical linux-aws to version 4.15.0-1121.129.
- Update canonical linux-aws-5.4 to version 5.4.0-1066.69~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1131.144.
- Update canonical linux-azure-5.4 to version 5.4.0-1070.73~18.04.1.
- Update canonical linux-dell300x to version 4.15.0-1035.40.
- Update canonical linux-gcp-4.15 to version 4.15.0-1116.130.
- Update canonical linux-gcp-5.4 to version 5.4.0-1065.69~18.04.1.
- Update canonical linux-gke-5.4 to version 5.4.0-1063.66~18.04.1.
- Update canonical linux-gkeop-5.4 to version 5.4.0-1034.35~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-100.113~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1015.16~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1107.109.
- Update canonical linux-oracle to version 4.15.0-1087.95.
- Update canonical linux-oracle-5.4 to version 5.4.0-1064.68~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1053.60~18.04.1.
- Update canonical linux-raspi2 to version 4.15.0-1103.110.
- Update canonical linux-snapdragon to version 4.15.0-1120.129.
- Update canonical linux-aws-fips to version 4.15.0-2061.63.
- Update canonical linux-azure-fips to version 4.15.0-2043.47.
- Update canonical linux-fips to version 4.15.0-1078.87.
- Update canonical linux-gcp-fips to version 4.15.0-2026.28.
- Update canonical linux to version 5.4.0-100.113.
- Update canonical linux-aws to version 5.4.0-1066.69.
- Update canonical linux-aws-5.13 to version 5.13.0-1014.15~20.04.1.
- Update canonical linux-azure to version 5.4.0-1070.73.
- Update canonical linux-azure-5.13 to version 5.13.0-1014.16~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1028.31.
- Update canonical linux-gcp to version 5.4.0-1065.69.
- Update canonical linux-gcp-5.13 to version 5.13.0-1015.18~20.04.1.
- Update canonical linux-gke to version 5.4.0-1063.66.
- Update canonical linux-gkeop to version 5.4.0-1034.35.
- Update canonical linux-hwe-5.13 to version 5.13.0-30.33~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1015.16.
- Update canonical linux-intel-5.13 to version 5.13.0-1010.10.
- Update canonical linux-kvm to version 5.4.0-1056.58.
- Update canonical linux-oem-5.14 to version 5.14.0-1022.24.
- Update canonical linux-oracle to version 5.4.0-1064.68.
- Update canonical linux-oracle-5.13 to version 5.13.0-1018.22~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1053.60.
- Update canonical linux-aws-fips to version 5.4.0-1069.73+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1073.76+fips1.
- Update canonical linux-fips to version 5.4.0-1043.49.
- Update canonical linux-gcp-fips to version 5.4.0-1067.71~20.04.1.
- Update debian linux to version 5.15.15-1.
- Update linux linux_kernel to version 5.16 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1116.122 Fix: upgrade to 4.4.0-1116.122
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1131.144~14.04.1 Fix: upgrade to 4.15.0-1131.144~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-237.271~14.04.1 Fix: upgrade to 4.4.0-237.271~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-237.271 Fix: upgrade to 4.4.0-237.271
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1154.169 Fix: upgrade to 4.4.0-1154.169
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1120.128~16.04.1 Fix: upgrade to 4.15.0-1120.128~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1131.144~16.04.1 Fix: upgrade to 4.15.0-1131.144~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1116.130~16.04.1 Fix: upgrade to 4.15.0-1116.130~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-169.177~16.04.1 Fix: upgrade to 4.15.0-169.177~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1117.127 Fix: upgrade to 4.4.0-1117.127
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1087.95~16.04.1 Fix: upgrade to 4.15.0-1087.95~16.04.1
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1086.93 Fix: upgrade to 4.4.0-1086.93
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-169.177 Fix: upgrade to 4.15.0-169.177
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1121.129 Fix: upgrade to 4.15.0-1121.129
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1066.69~18.04.1 Fix: upgrade to 5.4.0-1066.69~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1131.144 Fix: upgrade to 4.15.0-1131.144
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1070.73~18.04.1 Fix: upgrade to 5.4.0-1070.73~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-dell300x |
< 4.15.0-1035.40 Fix: upgrade to 4.15.0-1035.40
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1116.130 Fix: upgrade to 4.15.0-1116.130
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1065.69~18.04.1 Fix: upgrade to 5.4.0-1065.69~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 |
< 5.4.0-1063.66~18.04.1 Fix: upgrade to 5.4.0-1063.66~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 |
< 5.4.0-1034.35~18.04.1 Fix: upgrade to 5.4.0-1034.35~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-100.113~18.04.1 Fix: upgrade to 5.4.0-100.113~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1015.16~18.04.1 Fix: upgrade to 5.4.0-1015.16~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1107.109 Fix: upgrade to 4.15.0-1107.109
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1087.95 Fix: upgrade to 4.15.0-1087.95
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1064.68~18.04.1 Fix: upgrade to 5.4.0-1064.68~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1053.60~18.04.1 Fix: upgrade to 5.4.0-1053.60~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1103.110 Fix: upgrade to 4.15.0-1103.110
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1120.129 Fix: upgrade to 4.15.0-1120.129
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2061.63 Fix: upgrade to 4.15.0-2061.63
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2043.47 Fix: upgrade to 4.15.0-2043.47
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1078.87 Fix: upgrade to 4.15.0-1078.87
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2026.28 Fix: upgrade to 4.15.0-2026.28
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
Showing 50 of 103. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-100.113 Fix: upgrade to 5.4.0-100.113
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1066.69 Fix: upgrade to 5.4.0-1066.69
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 |
< 5.13.0-1014.15~20.04.1 Fix: upgrade to 5.13.0-1014.15~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1070.73 Fix: upgrade to 5.4.0-1070.73
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 |
< 5.13.0-1014.16~20.04.1 Fix: upgrade to 5.13.0-1014.16~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1028.31 Fix: upgrade to 5.4.0-1028.31
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1065.69 Fix: upgrade to 5.4.0-1065.69
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 |
< 5.13.0-1015.18~20.04.1 Fix: upgrade to 5.13.0-1015.18~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gke |
< 5.4.0-1063.66 Fix: upgrade to 5.4.0-1063.66
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1034.35 Fix: upgrade to 5.4.0-1034.35
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 |
< 5.13.0-30.33~20.04.1 Fix: upgrade to 5.13.0-30.33~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1015.16 Fix: upgrade to 5.4.0-1015.16
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 |
< 5.13.0-1010.10 Fix: upgrade to 5.13.0-1010.10
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1056.58 Fix: upgrade to 5.4.0-1056.58
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 |
< 5.14.0-1022.24 Fix: upgrade to 5.14.0-1022.24
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1064.68 Fix: upgrade to 5.4.0-1064.68
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 |
< 5.13.0-1018.22~20.04.1 Fix: upgrade to 5.13.0-1018.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1053.60 Fix: upgrade to 5.4.0-1053.60
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1069.73+fips2 Fix: upgrade to 5.4.0-1069.73+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1073.76+fips1 Fix: upgrade to 5.4.0-1073.76+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1043.49 Fix: upgrade to 5.4.0-1043.49
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1067.71~20.04.1 Fix: upgrade to 5.4.0-1067.71~20.04.1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| – | linux | linux_kernel |
< 5.16 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 5.15.15-1 Fix: upgrade to 5.15.15-1
|
Original advisory text
A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XF...
A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them.
References
- https://access.redhat.com/security/cve/CVE-2021-4155 Mitigation Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2034813 Issue Tracking Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=98... Mailing List Patch Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-4155 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5362-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5884-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2021-4155 Third Party Advisory
- https://git.kernel.org/linus/983d8e60f50806f90534cc5373d0ce867e5aaf79 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/01/10/1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5278-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5294-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5295-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5294-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5295-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5297-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5298-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5926-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2021-4155 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
6.8
Medium
Type
CWE-131Incorrect Calculation of Buffer Size
Timeline
Published31 Dec 2021
Updated4 Nov 2026
First seen12 May 2026
Track software like this
Free during beta