Security Advisory

CVE-2021-3492

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-17 04:20:16

Last updated 2024-09-17 03:54:52

Assigner canonical

State PUBLISHED

Description

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.

← Browse all CVEs View on cve.org ↗