Vulnerability Name:

CVE-2021-44879 (CCN-219533)

Assigned:2021-12-13
Published:2022-02-12
Updated:2022-02-22
Summary:In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-476
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2021-44879

Source: CCN
Type: Kernel.org Bugzilla - Bug 215231
kernel NULL pointer dereference triggered in folio_mark_dirty() when mount and operate on a crafted f2fs image

Source: MISC
Type: Exploit, Issue Tracking, Vendor Advisory
https://bugzilla.kernel.org/show_bug.cgi?id=215231

Source: CONFIRM
Type: Mailing List, Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3

Source: XF
Type: UNKNOWN
linux-kernel-cve202144879-dos(219533)

Source: CCN
Type: Linux Kernel GIT Repository
f2fs: fix to do sanity check on inode type during garbage collection

Source: MISC
Type: Mailing List, Patch, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9056d6489f5a41cfbb67f719d2c0ce61ead72d9f

Source: MISC
Type: Mailing List, Patch, Vendor Advisory
https://lore.kernel.org/linux-f2fs-devel/20211206144421.3735-3-chao@kernel.org/T/

Source: CCN
Type: oss-sec Mailing List, Sat, 12 Feb 2022 02:04:11 -0500
CVE-2021-44879: kernel:NULL pointer dereference in fs/f2fs/gc.c:move_data_page

Vulnerable Configuration:Configuration 1:
  • cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:* (Version < 5.16.3)

    • Configuration CCN 1:
  • cpe:/o:linux:linux_kernel:5.16:-:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:8029
    P
    		kernel-docs-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-20
    oval:org.opensuse.security:def:7539
    P
    		kernel-64kb-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:8090
    P
    		reiserfs-kmp-default-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:3753
    P
    		Security update for the Linux Kernel (Important)
    2022-08-01
    oval:org.opensuse.security:def:95383
    P
    		Security update for the Linux Kernel (Important)
    2022-08-01
    oval:org.opensuse.security:def:627
    P
    		Security update for the Linux Kernel (Important)
    2022-08-01
    oval:org.opensuse.security:def:95416
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:94263
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3726
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:95350
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:93630
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3643
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:95427
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:94472
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:93159
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:95356
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:93837
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:589
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:3705
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:95273
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:93319
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3783
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:94051
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3720
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:95335
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:93477
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3794
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:42175
    P
    		Security update for the Linux Kernel (Important)
    2022-04-19
    oval:org.opensuse.security:def:118437
    P
    		Security update for the Linux Kernel (Important)
    2022-04-19
    oval:org.opensuse.security:def:6183
    P
    		Security update for the Linux Kernel (Important)
    2022-04-07
    oval:org.opensuse.security:def:1795
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:843
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:101828
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:99193
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:42255
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:1555
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:102154
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:100390
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:1150
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:101889
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:99463
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:1594
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:102304
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:100723
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:1229
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:101951
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:99725
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:1746
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:102347
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:101574
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:42254
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:1298
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:102119
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:100056
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:6184
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:4741
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:6361
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:5361
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:4306
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:4702
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:125121
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:118660
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:127373
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119331
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:125406
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:118836
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:42209
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119514
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:118267
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:125812
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119026
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119699
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:126975
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119137
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    BACK
    linux linux kernel *
    linux linux kernel 5.16 -