{"timestamp":"2024-06-28T17:01:37.364142Z","id":"CVE-2021-46945","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["fs/ext4/super.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"014c9caa29d3a44e0de695c99ef18bec3e887d52","lessThan":"64e1eebe2131183174f4fbb6b1491355f96c6cde","versionType":"git","status":"affected"},{"version":"014c9caa29d3a44e0de695c99ef18bec3e887d52","lessThan":"1e9ea8f4637026b8e965128953f2da061ccae9c4","versionType":"git","status":"affected"},{"version":"014c9caa29d3a44e0de695c99ef18bec3e887d52","lessThan":"ac2f7ca51b0929461ea49918f27c11b680f28995","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["fs/ext4/super.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.11","status":"affected"},{"version":"0","lessThan":"5.11","versionType":"semver","status":"unaffected"},{"version":"5.11.20","lessThanOrEqual":"5.11.*","versionType":"semver","status":"unaffected"},{"version":"5.12.3","lessThanOrEqual":"5.12.*","versionType":"semver","status":"unaffected"},{"version":"5.13","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]

https://git.kernel.org/stable/c/1e9ea8f4637026b8e965128953f2da061ccae9c4

https://git.kernel.org/stable/c/64e1eebe2131183174f4fbb6b1491355f96c6cde

https://git.kernel.org/stable/c/ac2f7ca51b0929461ea49918f27c11b680f28995

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NIST NVD-CWE-noinfo

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11.0 up to (excluding) 5.11.20
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.12.0 up to (excluding) 5.12.3

https://git.kernel.org/stable/c/1e9ea8f4637026b8e965128953f2da061ccae9c4 No Types Assigned

https://git.kernel.org/stable/c/1e9ea8f4637026b8e965128953f2da061ccae9c4 Patch

https://git.kernel.org/stable/c/64e1eebe2131183174f4fbb6b1491355f96c6cde No Types Assigned

https://git.kernel.org/stable/c/64e1eebe2131183174f4fbb6b1491355f96c6cde Patch

https://git.kernel.org/stable/c/ac2f7ca51b0929461ea49918f27c11b680f28995 No Types Assigned

https://git.kernel.org/stable/c/ac2f7ca51b0929461ea49918f27c11b680f28995 Patch

In the Linux kernel, the following vulnerability has been resolved:

ext4: always panic when errors=panic is specified

Before commit 014c9caa29d3 ("ext4: make ext4_abort() use
__ext4_error()"), the following series of commands would trigger a
panic:

1. mount /dev/sda -o ro,errors=panic test
2. mount /dev/sda -o remount,abort test

After commit 014c9caa29d3, remounting a file system using the test
mount option "abort" will no longer trigger a panic.  This commit will
restore the behaviour immediately before commit 014c9caa29d3.
(However, note that the Linux kernel's behavior has not been
consistent; some previous kernel versions, including 5.4 and 4.19
similarly did not panic after using the mount option "abort".)

This also makes a change to long-standing behaviour; namely, the
following series commands will now cause a panic, when previously it
did not:

1. mount /dev/sda -o ro,errors=panic test
2. echo test > /sys/fs/ext4/sda/trigger_fs_error

However, this makes ext4's behaviour much more consistent, so this is
a good thing.

Linux https://git.kernel.org/stable/c/1e9ea8f4637026b8e965128953f2da061ccae9c4 [No types assigned]

Linux https://git.kernel.org/stable/c/64e1eebe2131183174f4fbb6b1491355f96c6cde [No types assigned]

Linux https://git.kernel.org/stable/c/ac2f7ca51b0929461ea49918f27c11b680f28995 [No types assigned]