CVE-2021-3739: Null Pointer Dereference
A NULL pointer dereference flaw was found in btrfsrmdevice function in fs/btrfs/volumes.c in Linux Kernel, where triggering the bug requires ‘CAPSYSADMIN’. This could allow a local attacker to crash the system or leak kernel internal information.
References: https://lore.kernel.org/linux-btrfs/CAFcO6XO5TC5sEo-C9JGC75JkNAzkOSSLA3a=bwQqXFFbRTZ7Gw@mail.gmail.com/T/#md4b850f33616b7364f86e6fed144abc925f3669c https://lore.kernel.org/linux-btrfs/20210806102415.304717-1-wqu@suse.com/T/#u
Other sources
A NULL pointer dereference flaw was found in the btrfsrmdevice function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAPSYSADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3739?
CVE-2021-3739 has a severity level that allows local attackers to crash the system or potentially leak sensitive kernel information.
How do I fix CVE-2021-3739?
To fix CVE-2021-3739, it is recommended to upgrade to a patched version of the Linux kernel, specifically 5.10.223-1, 5.10.226-1, or later.
Who is affected by CVE-2021-3739?
CVE-2021-3739 affects users running vulnerable Linux kernel versions up to 5.14.20 and certain NetApp firmware versions.
What causes CVE-2021-3739?
CVE-2021-3739 is caused by a NULL pointer dereference flaw in the btrfs_rm_device function within the Linux kernel.
Can CVE-2021-3739 be exploited remotely?
CVE-2021-3739 cannot be exploited remotely as it requires local access with CAP_SYS_ADMIN capabilities.