CVE-2021-38203: Medium severity Linux Linux kernel vulnerability
btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system spaceinfo.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernel btrfsto a version that resolves this vulnerability.Fixed in 5.13.4
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38203?
CVE-2021-38203 has been classified as a denial of service (DoS) vulnerability impacting stability due to potential deadlocks during allocation.
How do I fix CVE-2021-38203?
To fix CVE-2021-38203, upgrade the Linux kernel to version 5.13.4 or later.
Which versions of the Linux kernel are affected by CVE-2021-38203?
CVE-2021-38203 affects Linux kernel versions prior to 5.13.4.
What types of systems are impacted by CVE-2021-38203?
CVE-2021-38203 impacts systems using the affected versions of the Linux kernel, including certain NetApp products.
Is there a workaround for CVE-2021-38203?
There is no specific workaround for CVE-2021-38203; updating to a patched version of the Linux kernel is the recommended action.