PT-2021-6091 · Linux+10 · Linux Kernel+10

Kirill Tkhai

·

Published

2021-12-22

·

Updated

2023-08-14

·

CVE-2021-4155

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16 Linux kernel versions 5.15 through 5.15.13 Linux kernel versions 5.10 through 5.10.90 Linux kernel versions 5.4 through 5.4.170 Linux kernel versions 4.19 through 4.19.224
Description A data leak flaw was found in the XFS filesystem, specifically in the way XFS IOC ALLOCSP IOCTL allowed for size increase of files with unaligned size. This flaw could be exploited by a local attacker to leak data on the XFS filesystem that would otherwise be inaccessible to them. The issue is related to incorrect buffer size calculation in the ioctl(XFS IOC ALLOCSP) and ioctl(XFS IOC FREESP) system calls. A local unprivileged user could use this flaw to read raw data from unused blocks on the block device directly.
Recommendations For Linux kernel versions prior to 5.16, update to version 5.16 or later to resolve the issue. For Linux kernel versions 5.15 through 5.15.13, update to version 5.15.14 or later to resolve the issue. For Linux kernel versions 5.10 through 5.10.90, update to version 5.10.91 or later to resolve the issue. For Linux kernel versions 5.4 through 5.4.170, update to version 5.4.171 or later to resolve the issue. For Linux kernel versions 4.19 through 4.19.224, update to version 4.19.225 or later to resolve the issue. As a temporary workaround, consider restricting access to the XFS filesystem to minimize the risk of exploitation.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2022:0188
ALT-PU-2022-1155
ALT-PU-2022-1175
ALT-PU-2022-1647
ALT-PU-2022-2155
ALT-PU-2023-1684
ALT-PU-2023-1741
ALT-PU-2023-1814
ALT-PU-2023-4894
AZL-10677
BDU:2022-00755
CESA-2022_0176
CESA-2022_0188
CESA-2022_0232
CESA-2022_0620
CVE-2021-4155
DLA-2940-1
DLA-2941-1
DSA-5050-1
DSA-5096-1
MGASA-2022-0021
MGASA-2022-0022
OESA-2022-1504
OPENSUSE-SU-2022_3264-1
OPENSUSE-SU-2022_3609-1
RHSA-2022:0176
RHSA-2022:0186
RHSA-2022:0187
RHSA-2022:0188
RHSA-2022:0231
RHSA-2022:0232
RHSA-2022:0335
RHSA-2022:0344
RHSA-2022:0529
RHSA-2022:0530
RHSA-2022:0531
RHSA-2022:0533
RHSA-2022:0540
RHSA-2022:0590
RHSA-2022:0592
RHSA-2022:0620
RHSA-2022:0622
RHSA-2022:0629
RHSA-2022:0636
RHSA-2022:0712
RHSA-2022:0718
RHSA-2022:0958
RHSA-2022:1263
RHSA-2022:1417
RHSA-2022_0176
RHSA-2022_0188
RHSA-2022_0620
RHSA-2022_0622
RHSA-2022_1417
RLSA-2022:0176
RLSA-2022:0188
SUSE-SU-2022:0362-1
SUSE-SU-2022:0477-1
SUSE-SU-2022:14905-1
SUSE-SU-2022:3264-1
SUSE-SU-2022:3450-1
SUSE-SU-2022:3609-1
SUSE-SU-2022:3809-1
SUSE-SU-2022_14905-1
USN-5278-1
USN-5294-1
USN-5294-2
USN-5295-1
USN-5295-2
USN-5297-1
USN-5298-1
USN-5362-1
USN-5884-1
USN-5926-1

Affected Products

Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu