PT-2024-11111 · Linux · Linux Kernel

Chao Yu · Published 2021-03-12 · Updated 2025-01-08 · CVE-2021-47007

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a panic that occurs during the f2fs resize fs() function in the Linux kernel. This happens when the filesystem is resized to a smaller size, and there is not enough space to store all valid blocks. The root cause is the failure to check for sufficient space in the resized filesystem before migrating blocks, leading to an out-of-space condition during block migration in free segment range(). The vulnerable function is f2fs resize fs(), and the affected code path includes allocate segment by default(), f2fs allocate data block(), do write page(), f2fs outplace write data(), f2fs do write data page(), move data page(), do garbage collect(), and free segment range().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2025-06536

CVE-2021-47007

Affected Products

Linux Kernel

References · 22

• https://cve.org/CVERecord?id=CVE-2021-47007 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47007 · Vendor Advisory
• https://git.kernel.org/stable/c/860afd680d9cc1dabd61cda3cd246f60aa1eb705 · Patch
• https://git.kernel.org/stable/c/3ab0598e6d860ef49d029943ba80f627c15c15d6 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47007 · Vendor Advisory
• https://git.kernel.org/stable/c/822054e5026c43b1dd60cf387dd999e95ee2ecc2 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47007 · Vendor Advisory
• https://git.kernel.org/stable/c/1c20a4896409f5ca1c770e1880c33d0a28a8b10f · Patch
• https://bdu.fstec.ru/vul/2025-06536 · Security Note
• https://ubuntu.com/security/CVE-2021-47007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47007 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47007 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47007 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.5 · Note
• https://twitter.com/CVEnew/status/1762754419685482739 · Twitter Post