CVE-2021-44879: Null Pointer Dereference
In gcdatasegment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a movedatapage NULL pointer dereference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.16.3
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44879?
CVE-2021-44879 has been rated as a medium severity vulnerability due to the potential for a NULL pointer dereference.
How do I fix CVE-2021-44879?
To fix CVE-2021-44879, upgrade your Linux kernel to version 5.16.3 or later.
What Linux kernel versions are affected by CVE-2021-44879?
CVE-2021-44879 affects Linux kernel versions prior to 5.16.3.
Can CVE-2021-44879 be exploited remotely?
CVE-2021-44879 is not classified as a remotely exploitable vulnerability but could impact local system stability.
What component of the Linux kernel is impacted by CVE-2021-44879?
CVE-2021-44879 impacts the gc_data_segment function in the filesystem implementation of the Linux kernel.