An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1944298 | issue tracking third party advisory |
| https://www.openwall.com/lists/oss-security/2021/03/28/2 | mailing list third party advisory patch |
| https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg2520013.html | |
| http://www.openwall.com/lists/oss-security/2021/05/08/1 | mailing list third party advisory patch |
| https://security.netapp.com/advisory/ntap-20210611-0007/ | third party advisory |
| https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html | third party advisory mailing list |