Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2021-45469: f2fs File System May Crash with Invalid File Attributes
CVE-2021-45469 · published 4 years ago
Summary
An issue in the Linux kernel's f2fs file system can cause a crash when a file has corrupted attributes. This could potentially happen if a malicious user intentionally corrupts file metadata. To mitigate this, consider updating to a fixed Linux kernel version.
What to do
- Update canonical linux-aws to version 4.4.0-1102.107.
- Update canonical linux-azure to version 4.15.0-1131.144~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-222.255~14.04.1.
- Update canonical linux to version 4.4.0-222.255.
- Update canonical linux-aws to version 4.4.0-1138.152.
- Update canonical linux-aws-hwe to version 4.15.0-1120.128~16.04.1.
- Update canonical linux-azure to version 4.15.0-1131.144~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1116.130~16.04.1.
- Update canonical linux-hwe to version 4.15.0-169.177~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1103.112.
- Update canonical linux-oracle to version 4.15.0-1087.95~16.04.1.
- Update canonical linux-fips to version 4.4.0-1072.78.
- Update canonical linux to version 4.15.0-169.177.
- Update canonical linux-aws to version 4.15.0-1121.129.
- Update canonical linux-aws-5.4 to version 5.4.0-1069.73~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1131.144.
- Update canonical linux-azure-5.4 to version 5.4.0-1073.76~18.04.1.
- Update canonical linux-dell300x to version 4.15.0-1035.40.
- Update canonical linux-gcp-4.15 to version 4.15.0-1116.130.
- Update canonical linux-gcp-5.4 to version 5.4.0-1068.72~18.04.1.
- Update canonical linux-gke-5.4 to version 5.4.0-1066.69~18.04.1.
- Update canonical linux-gkeop-5.4 to version 5.4.0-1037.38~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-105.119~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1018.20~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1107.109.
- Update canonical linux-oracle to version 4.15.0-1087.95.
- Update canonical linux-oracle-5.4 to version 5.4.0-1067.72~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1056.63~18.04.1.
- Update canonical linux-raspi2 to version 4.15.0-1103.110.
- Update canonical linux-snapdragon to version 4.15.0-1120.129.
- Update canonical linux-aws-fips to version 4.15.0-2061.63.
- Update canonical linux-azure-fips to version 4.15.0-2043.47.
- Update canonical linux-fips to version 4.15.0-1078.87.
- Update canonical linux-gcp-fips to version 4.15.0-2026.28.
- Update canonical linux to version 5.4.0-105.119.
- Update canonical linux-aws to version 5.4.0-1069.73.
- Update canonical linux-aws-5.13 to version 5.13.0-1019.21~20.04.1.
- Update canonical linux-azure to version 5.4.0-1073.76.
- Update canonical linux-azure-5.13 to version 5.13.0-1021.24~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1032.35.
- Update canonical linux-gcp to version 5.4.0-1068.72.
- Update canonical linux-gcp-5.13 to version 5.13.0-1021.25~20.04.1.
- Update canonical linux-gke to version 5.4.0-1066.69.
- Update canonical linux-gkeop to version 5.4.0-1037.38.
- Update canonical linux-hwe-5.13 to version 5.13.0-37.42~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1018.20.
- Update canonical linux-kvm to version 5.4.0-1059.62.
- Update canonical linux-oem-5.14 to version 5.14.0-1022.24.
- Update canonical linux-oracle to version 5.4.0-1067.72.
- Update canonical linux-oracle-5.13 to version 5.13.0-1025.30~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1056.63.
- Update canonical linux-aws-fips to version 5.4.0-1069.73+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1073.76+fips1.
- Update canonical linux-fips to version 5.4.0-1046.52.
- Update canonical linux-gcp-fips to version 5.4.0-1067.71~20.04.1.
- Update debian linux to version 5.15.15-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1102.107 Fix: upgrade to 4.4.0-1102.107
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1131.144~14.04.1 Fix: upgrade to 4.15.0-1131.144~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-222.255~14.04.1 Fix: upgrade to 4.4.0-222.255~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-222.255 Fix: upgrade to 4.4.0-222.255
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1138.152 Fix: upgrade to 4.4.0-1138.152
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1120.128~16.04.1 Fix: upgrade to 4.15.0-1120.128~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1131.144~16.04.1 Fix: upgrade to 4.15.0-1131.144~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1116.130~16.04.1 Fix: upgrade to 4.15.0-1116.130~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-169.177~16.04.1 Fix: upgrade to 4.15.0-169.177~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1103.112 Fix: upgrade to 4.4.0-1103.112
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1087.95~16.04.1 Fix: upgrade to 4.15.0-1087.95~16.04.1
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1072.78 Fix: upgrade to 4.4.0-1072.78
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-169.177 Fix: upgrade to 4.15.0-169.177
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1121.129 Fix: upgrade to 4.15.0-1121.129
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1069.73~18.04.1 Fix: upgrade to 5.4.0-1069.73~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1131.144 Fix: upgrade to 4.15.0-1131.144
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1073.76~18.04.1 Fix: upgrade to 5.4.0-1073.76~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-dell300x |
< 4.15.0-1035.40 Fix: upgrade to 4.15.0-1035.40
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1116.130 Fix: upgrade to 4.15.0-1116.130
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1068.72~18.04.1 Fix: upgrade to 5.4.0-1068.72~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 |
< 5.4.0-1066.69~18.04.1 Fix: upgrade to 5.4.0-1066.69~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 |
< 5.4.0-1037.38~18.04.1 Fix: upgrade to 5.4.0-1037.38~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-105.119~18.04.1 Fix: upgrade to 5.4.0-105.119~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1018.20~18.04.1 Fix: upgrade to 5.4.0-1018.20~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1107.109 Fix: upgrade to 4.15.0-1107.109
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1087.95 Fix: upgrade to 4.15.0-1087.95
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1067.72~18.04.1 Fix: upgrade to 5.4.0-1067.72~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1056.63~18.04.1 Fix: upgrade to 5.4.0-1056.63~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1103.110 Fix: upgrade to 4.15.0-1103.110
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1120.129 Fix: upgrade to 4.15.0-1120.129
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2061.63 Fix: upgrade to 4.15.0-2061.63
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2043.47 Fix: upgrade to 4.15.0-2043.47
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1078.87 Fix: upgrade to 4.15.0-1078.87
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2026.28 Fix: upgrade to 4.15.0-2026.28
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
Showing 50 of 111. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-105.119 Fix: upgrade to 5.4.0-105.119
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1069.73 Fix: upgrade to 5.4.0-1069.73
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 |
< 5.13.0-1019.21~20.04.1 Fix: upgrade to 5.13.0-1019.21~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1073.76 Fix: upgrade to 5.4.0-1073.76
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 |
< 5.13.0-1021.24~20.04.1 Fix: upgrade to 5.13.0-1021.24~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1032.35 Fix: upgrade to 5.4.0-1032.35
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1068.72 Fix: upgrade to 5.4.0-1068.72
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 |
< 5.13.0-1021.25~20.04.1 Fix: upgrade to 5.13.0-1021.25~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gke |
< 5.4.0-1066.69 Fix: upgrade to 5.4.0-1066.69
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1037.38 Fix: upgrade to 5.4.0-1037.38
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 |
< 5.13.0-37.42~20.04.1 Fix: upgrade to 5.13.0-37.42~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1018.20 Fix: upgrade to 5.4.0-1018.20
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1059.62 Fix: upgrade to 5.4.0-1059.62
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 |
< 5.14.0-1022.24 Fix: upgrade to 5.14.0-1022.24
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1067.72 Fix: upgrade to 5.4.0-1067.72
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 |
< 5.13.0-1025.30~20.04.1 Fix: upgrade to 5.13.0-1025.30~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1056.63 Fix: upgrade to 5.4.0-1056.63
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1069.73+fips2 Fix: upgrade to 5.4.0-1069.73+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1073.76+fips1 Fix: upgrade to 5.4.0-1073.76+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1046.52 Fix: upgrade to 5.4.0-1046.52
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1067.71~20.04.1 Fix: upgrade to 5.4.0-1067.71~20.04.1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| – | linux | linux_kernel |
<= 5.15.11 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
34 35 cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* |
| – | debian | debian_linux |
9.0 10.0 11.0 cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| – | netapp | h410c_firmware |
All versions
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h300s_firmware |
All versions
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h500s_firmware |
All versions
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h700s_firmware |
All versions
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h300e_firmware |
All versions
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h500e_firmware |
All versions
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h700e_firmware |
All versions
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h410s_firmware |
All versions
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 5.15.15-1 Fix: upgrade to 5.15.15-1
|
Original advisory text
In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry.
In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry.
References
- https://ubuntu.com/security/CVE-2021-45469 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5343-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5377-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2021-45469 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/12/25/1 Mailing List Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html Mailing List Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://security.netapp.com/advisory/ntap-20220114-0003/ Third Party Advisory
- https://www.debian.org/security/2022/dsa-5050 Third Party Advisory
- https://www.debian.org/security/2022/dsa-5096 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-45469 Vendor Advisory
- https://bugzilla.kernel.org/show_bug.cgi?id=215235 Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git/commit/?h=dev&id=... Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-125Out-of-bounds Read
Timeline
Published23 Dec 2021
Updated4 Nov 2026
First seen2 Apr 2026
Track software like this
Free during beta