CVE-2021-47072

Summary

CVE-2021-47072 is a vulnerability affecting the Linux kernel's btrfs file system. The issue arises when moving an inode from one directory to another, and both the inode and its previous parent directory were logged before a power failure. In such cases, the old parent directory should not have the dentry for the old parent if the log is synced. However, if the old parent is not authoritative for a range that includes the dir index and dir item keys of the old dentry, the old dentry may still exist, leading to potential security issues. This vulnerability can be triggered by creating specific directories and files with particular node sizes, file counts, and file names. It is important to note that this vulnerability only affects the first leaf, and the issue is resolved by updating the inode item and changing only the first leaf.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.