CVE-2021-33631: Kernel crash in EXT4 filesystem
First published: Thu Jan 18 2024(Updated: )
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.
Credit: securities@openeuler.org securities@openeuler.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <6.2 | 6.2 |
| IBM QRadar Security Information and Event Manager | <=7.5 - 7.5.0 UP8 IF01 | |
| openEuler | >=4.19.90<4.19.90-2401.3 | |
| openEuler | >=4.19.90<4.19.90-2401.3 | |
| openEuler | >=5.10.0-60.18.0<5.10.0-183.0.0 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.16-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2024/01/30/10
- http://www.openwall.com/lists/oss-security/2024/01/30/3
- http://www.openwall.com/lists/oss-security/2024/01/30/4
- http://www.openwall.com/lists/oss-security/2024/01/30/5
- http://www.openwall.com/lists/oss-security/2024/01/30/9
- http://www.openwall.com/lists/oss-security/2024/01/31/2
- http://www.openwall.com/lists/oss-security/2024/01/31/3
- http://www.openwall.com/lists/oss-security/2024/02/02/6
- http://www.openwall.com/lists/oss-security/2024/02/02/9
- http://www.openwall.com/lists/oss-security/2024/02/03/1
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8
- https://gitee.com/src-openeuler/kernel/pulls/1389
- https://gitee.com/src-openeuler/kernel/pulls/1396
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035
- https://exchange.xforce.ibmcloud.com/vulnerabilities/280351
- https://www.ibm.com/support/pages/node/7150684 (Advisory)
- https://github.com/torvalds/linux/commit/5c099c4fdc438014d5893629e70a8ba934433ee8
- https://www.openwall.com/lists/oss-security/2024/01/30/3
- https://nvd.nist.gov/vuln/detail/CVE-2021-33631
- https://access.redhat.com/errata/RHSA-2023:2458
- https://access.redhat.com/errata/RHSA-2023:2148
- https://access.redhat.com/errata/RHSA-2024:1607
- https://access.redhat.com/errata/RHSA-2024:1614
- https://access.redhat.com/errata/RHSA-2024:1653
- https://access.redhat.com/errata/RHSA-2024:1840
- https://access.redhat.com/errata/RHSA-2024:1836
- https://access.redhat.com/errata/RHSA-2024:2621
- https://bugzilla.redhat.com/show_bug.cgi?id=2261976
- https://launchpad.net/bugs/cve/CVE-2021-33631
- https://git.kernel.org/linus/5c099c4fdc438014d5893629e70a8ba934433ee8
- https://security-tracker.debian.org/tracker/CVE-2021-33631
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33631
- https://ubuntu.com/security/CVE-2021-33631
Frequently Asked Questions
What is the severity of CVE-2021-33631?
CVE-2021-33631 has a medium severity rating due to the potential for an integer overflow leading to various security issues.
How do I fix CVE-2021-33631?
To remedy CVE-2021-33631, upgrade to the latest kernel versions or apply patches as recommended by your distribution.
Which products are affected by CVE-2021-33631?
CVE-2021-33631 affects openEuler kernel versions prior to 4.19.90-2401.3 and 5.10.0-183.0.0, as well as IBM QRadar SIEM 7.5 - 7.5.0 UP8 IF01.
Is my system vulnerable to CVE-2021-33631?
You may be vulnerable to CVE-2021-33631 if you are using affected versions of openEuler Linux or the specified IBM QRadar SIEM version.
What are the potential impacts of CVE-2021-33631?
Exploitation of CVE-2021-33631 could lead to system crashes or unauthorized access to sensitive data due to the forced integer overflow.
- agent/title
- agent/type
- collector/oss-sec
- source/oss-sec
- alias/CVE-2021-33630
- alias/CVE-2021-33631
- agent/author
- agent/severity
- agent/remedy
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/mitre-cve
- source/MITRE
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- agent/software-canonical-lookup
- agent/trending
- agent/source
- agent/weakness
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- agent/softwarecombine
- agent/tags
- collector/security-tracker-debian
- source/Debian
- package-manager/redhat
- vendor/ibm
- canonical/ibm qradar security information and event manager
- version/ibm qradar security information and event manager/7.5 - 7.5.0 up8 if01
- vendor/huawei
- canonical/openeuler
- version/openeuler/4.19.90
- version/openeuler/5.10.0-60.18.0
- package-manager/debian