vulnerability

Oracle Linux: CVE-2021-28964: ELSA-2021-9215: Unbreakable Enterprise kernel security update (IMPORTANT) (Multiple Advisories)

Severity
2
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:P)
Published
Mar 16, 2021
Added
May 6, 2021
Modified
Dec 3, 2025

Description

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.
A race condition flaw was found in get_old_root in fs/btrfs/ctree.c in the Linux kernel in btrfs file-system. This flaw allows a local attacker with a special user privilege to cause a denial of service due to not locking an extent buffer before a cloning operation. The highest threat from this vulnerability is to system availability.

Solution

oracle-linux-upgrade-kernel-uek
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.