cve/2021/CVE-2021-3428.md

18 lines
899 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2021-3428](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3428)
![](https://img.shields.io/static/v1?label=Product&message=kernel&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20Affects%20linux%20kernel%20before%20v5.9.%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-190%20-%20Integer%20Overflow%20or%20Wraparound&color=brighgreen)
### Description
A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4_es_cache_extent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem which can lead to an availability threat.
### POC
#### Reference
- https://ubuntu.com/security/CVE-2021-3428
#### Github
No PoCs found on GitHub currently.