CVE-2025-21811
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 416
Summary
CVE-2025-21811 is a vulnerability affecting the Linux kernel. It involves the nilfs2 file system where the function nilfs_lookup_dirty_data_buffers iterates through buffers attached to dirty data folios/pages without locking them. This lack of protection can lead to use-after-free issues when buffers lose their dirty state due to an asynchronous call to nilfs_clear_folio_dirty. The vulnerability is resolved by adjusting the lock section in the function to prevent unintended buffer freeing.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.