PT-2024-11341 · Linux+1 · Linux Kernel+1

Ye Bin · Published 2021-07-08 · Updated 2024-12-26 · CVE-2021-47342

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel, specifically in the ext4 file system. The issue occurs when the file system is remounted read-only, causing a race condition where the kmmpd thread can exit and point to freed memory, which can be tripped over by the call to ext4 stop mmpd(). This is fixed by only allowing the kmmpd thread to exit when it is stopped via ext4 stop mmpd().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-04680

CVE-2021-47342

Affected Products

Astra Linux

Linux Kernel

References · 19

• https://git.kernel.org/stable/c/61bb4a1c417e5b95d9edb4f887f131de32e419cb · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47342 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47342 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47342 · Vendor Advisory
• https://git.kernel.org/stable/c/7ed572cdf11081f8f9e07abd4bea56a3f2c4edbd · Patch
• https://git.kernel.org/stable/c/b663890d854403e566169f7e90aed5cd6ff64f6b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47342 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04680 · Security Note
• https://ubuntu.com/security/CVE-2021-47342 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47342 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47342 · Security Note
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=b663890d854403e566169f7e90aed5cd6ff64f6b · Note
• https://cve.omp.ru/bb30515 · Note
• https://access.redhat.com/security/cve/CVE-2021-47342 · Note
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=b663890d854403e566169f7e90aed5cd6ff64f6b · Note