PT-2022-2027 · Oracle · Oracle Solaris

Hans Christian Woithe · Published 2022-01-19 · Updated 2023-08-08 · CVE-2021-43395

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions illumos versions before f859e7171bb5db34321e45585839c6c3200ebb90 OmniOS Community Edition version r151038 OpenIndiana Hipster version 2021.04 SmartOS version 20210923 Oracle Solaris versions 10 and 11

Description A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. The issue is related to incorrect resource release, which can allow an attacker to cause a denial of service.

Recommendations For illumos versions before f859e7171bb5db34321e45585839c6c3200ebb90, update to a version after f859e7171bb5db34321e45585839c6c3200ebb90 to resolve the issue. For OmniOS Community Edition version r151038, update to a version after r151038. For OpenIndiana Hipster version 2021.04, update to a version after 2021.04. For SmartOS version 20210923, update to a version after 20210923. For Oracle Solaris versions 10 and 11, apply the necessary patches or updates to resolve the issue. As a temporary workaround, consider restricting access to tmpfs filesystems to minimize the risk of exploitation.

Exploit

Fix

Improper Resource Release

Improper Locking

Weakness Enumeration

CWE-404

CWE-667

Related Identifiers

BDU:2022-01623

CVE-2021-43395

Affected Products

Oracle Solaris

References · 13

• 🔥 https://github.com/illumos/illumos-gate/blob/069654420de4aade43c63c43cd2896e66945fc8a/usr/src/uts/common/fs/tmpfs/tmp_vnops.c · Exploit
• 🔥 https://github.com/illumos/illumos-gate/blob/b3403853e80914bd0aade9b5b605da4878078173/usr/src/uts/common/fs/tmpfs/tmp_dir.c · Exploit
• https://github.com/illumos/illumos-gate/commit/f859e7171bb5db34321e45585839c6c3200ebb90 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-43395 · Security Note
• https://illumos.topicbox.com/groups/developer/T1c9e4f27f8c2f959/security-heads-up-illumos14424 · Vendor Advisory
• https://oracle.com/security-alerts/cpujan2022.html · Patch
• https://illumos.org/issues/14424 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43395 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01623 · Security Note
• https://t.me/cvenotify/40692 · Telegram Post
• http://tribblix.org/relnotes.html · Note
• https://jgardner100.wordpress.com/2022/01/20/security-heads-up · Note
• https://kebe.com/blog/?p=505 · Note