CVE-2021-47007

Summary

CVE-2021-47007 is a vulnerability affecting the Linux kernel's f2fs filesystem. During the resizing process, the function f2fs_resize_fs() may hang due to insufficient space in the resized filesystem for all valid blocks. This issue arises from a failure to check available space before resizing. The result is an out-of-space error during block migration in free_segment_range(). The issue can be triggered by creating large files in a 16GB image, resizing the filesystem to 8GB, and deleting one of the files. The vulnerability has been addressed by preventing the allocation of data blocks when the size of the filesystem is smaller than the required space for valid blocks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.