CVE-2021-3739: fedoraproject fedora NULL Pointer Dereference

Analyzed

AliasesUBUNTU-CVE-2021-3739DEBIAN-CVE-2021-3739

Published 07-03-2022Last modified 03-08-2024

Vulnerability summary

CVE-2021-3739 is a high (CVSS 7.1) NULL Pointer Dereference vulnerability in fedoraproject fedora. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 49.8% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (GitHub, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.1/10

010

High · v3.1 (NVD)

EPSS score

0.62%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1github

Advisory lineage

Upstream 0 · Downstream 18 · Related 15

DSA-4978-1 MGASA-2021-0418 MGASA-2021-0419 OPENSUSE-SU-2021:1271-1 OPENSUSE-SU-2021:3179-1 OPENSUSE-SU-2021:3205-1+12 more

Timeline

07-03-2022
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.17.1v2.03.6

EPSS trend

Probability

0.62%

Chance of exploitation in the next 30 days

Percentile

50%

Versus all other CVEs

30-day change

Increase +0.01 pp

From 0.62% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

githubUnverified
Linux
Maturity: poc

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu56 products

linux< 5.4.0-90.101
linux-aws< 5.4.0-1059.62
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11< 5.11.0-1020.21~20.04.2
linux-aws-5.3All versions (No fix recorded)

linux-aws-5.4< 5.4.0-1059.62~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-fips< 5.4.0-1069.73+fips2 | All versions (No fix recorded)
linux-azureAll versions (No fix recorded) | < 5.4.0-1063.66
linux-azure-5.11< 5.11.0-1020.21~20.04.1
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1063.66~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fips< 5.4.0-1073.76+fips1 | All versions (No fix recorded)
linux-bluefield< 5.4.0-1021.24
linux-fips< 5.4.0-1036.42 | All versions (No fix recorded)
linux-gcpAll versions (No fix recorded) | < 5.4.0-1057.61
linux-gcp-5.11< 5.11.0-1021.23~20.04.1
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1057.61~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-edgeAll versions (No fix recorded)
linux-gcp-fips< 5.4.0-1067.71~20.04.1 | All versions (No fix recorded)
linux-gke< 5.4.0-1055.58
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.4< 5.4.0-1055.58~18.04.1
linux-gkeop< 5.4.0-1026.27
linux-gkeop-5.4< 5.4.0-1026.27~18.04.1
linux-hweAll versions (No fix recorded)
linux-hwe-5.11< 5.11.0-38.42~20.04.1
linux-hwe-5.4< 5.4.0-90.101~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1007.8
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtimeAll versions (No fix recorded)
linux-kvm< 5.4.0-1049.51
linux-oemAll versions (No fix recorded)
linux-oem-5.10< 5.10.0-1050.52
linux-oem-5.13< 5.13.0-1017.21
linux-oem-5.6All versions (No fix recorded)
linux-oracle< 5.4.0-1057.61
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11< 5.11.0-1020.21~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1057.61~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-raspi< 5.4.0-1046.50
linux-raspi-5.4< 5.4.0-1046.50~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded)
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11< 5.11.0-1021.22~20.04.1
linux-riscv-5.8All versions (No fix recorded)

Show all 56

Netapp8 products

Show all 8

Debian1 product

linux< 5.14.6-1

Fedoraproject1 product

fedoraEOL34

Linux1 product

linux_kernel≥ 4.20, < 5.4.144 | ≥ 5.5, < 5.10.62 | ≥ 5.11, < 5.13.14 | ≥ 5.14, < 5.14.1

5 vendors · 67 products

References

15 links

bugzilla.redhat.com/show_bug.cgi?id=1997958X Refsource MISCIssue TrackingPatchThird Party Advisory
ubuntu.com/security/CVE-2021-3739X Refsource MISCREPORTThird Party Advisory
www.openwall.com/lists/oss-security/2021/08/25/3X Refsource MISCREPORTMailing ListPatchThird Party Advisory
git.kernel.org/pub/…X Refsource MISCREPORTMailing ListPatchVendor Advisory
github.com/torvalds/linux/commit/e4571b8c5e9ffa1e85c0c671995bd4dcc5c75091X Refsource MISCExploitPatchThird Party Advisory
security.netapp.com/advisory/ntap-20220407-0006/X Refsource CONFIRMThird Party Advisory
lore.kernel.org/linux-btrfs/20210806102415.304717-1-wqu@suse.com/T/REPORT
ubuntu.com/security/notices/USN-5113-1Advisory
ubuntu.com/security/notices/USN-5115-1Advisory
ubuntu.com/security/notices/USN-5117-1Advisory

Show all 15 references

ubuntu.com/security/notices/USN-5137-1Advisory
ubuntu.com/security/notices/USN-5137-2Advisory
www.cve.org/CVERecord?id=CVE-2021-3739REPORT
security-tracker.debian.org/tracker/CVE-2021-3739Advisory
nvd.nist.gov/vuln/detail/CVE-2021-3739OvalAdvisory