CVE-2021-46982

Summary

CVE-2021-46982 is a vulnerability affecting the Linux kernel's F2FS file system. The issue lies in a race condition between truncate() and overwrite operations, which can result in a NULL pointer being returned by find_lock_page(). This can occur when one reference count is left in a page, but the page may not be attached to the mapping tree after truncation. The vulnerability was discovered during the pos_fsstress testcase and can lead to a kernel panic. To mitigate this issue, the updated page should no longer be referenced during the truncation process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.