CVE-2021-46923

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always cleanup mount_kattr Make sure that finish_mount_kattr() is called after mount_kattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We returned early if path lookup failed thereby risking to leak an additional reference we took when building mount_kattr when an idmapped mount was requested.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedFeb 27, 2024
First seenFeb 27, 2024

How to fix

Update
  • linux linux_kernel5.15.13 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel5.12.0 ≤ v < 5.15.135.15.13

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.