CVE-2021-47000 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: ceph: fix inode leak on getattr error in __fh_to_dentry

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Linux	Linux Kernel

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0a219432127d396120fc88cabd82785e0ff72a2f
https://git.kernel.org/stable/c/1775c7ddacfcea29051c67409087578f8f4d751b
https://git.kernel.org/stable/c/22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc
https://git.kernel.org/stable/c/2ad8af2b70e986284050213230428b823b950a38
https://git.kernel.org/stable/c/bf45c9fe99aa8003d2703f1bd353f956dea47e40
https://lore.kernel.org/linux-cve-announce/2024022828-CVE-2021-47000-981a@gregkh/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2021-47000
https://www.cve.org/CVERecord?id=CVE-2021-47000

History

Fri, 14 Mar 2025 19:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel

Fri, 01 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}` cvssV3_1 `{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-02-28T08:13:22.868Z

Updated: 2024-12-19T07:33:20.914Z

Reserved: 2024-02-27T18:42:55.950Z

Link: CVE-2021-47000

Vulnrichment

Updated: 2024-08-04T05:24:38.544Z

NVD

Status : Analyzed

Published: 2024-02-28T09:15:38.170

Modified: 2025-03-14T18:59:18.127

Link: CVE-2021-47000

Redhat

Severity : Moderate

Publid Date: 2024-02-28T00:00:00Z

Links: CVE-2021-47000 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47000", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-27T18:42:55.950Z", "datePublished": "2024-02-28T08:13:22.868Z", "dateUpdated": "2024-12-19T07:33:20.914Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T07:33:20.914Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix inode leak on getattr error in __fh_to_dentry"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ceph/export.c"], "versions": [{"version": "807460787179dee5f74906965eeb5f3ca2353992", "lessThan": "2ad8af2b70e986284050213230428b823b950a38", "status": "affected", "versionType": "git"}, {"version": "878dabb64117406abd40977b87544d05bb3031fc", "lessThan": "bf45c9fe99aa8003d2703f1bd353f956dea47e40", "status": "affected", "versionType": "git"}, {"version": "878dabb64117406abd40977b87544d05bb3031fc", "lessThan": "22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc", "status": "affected", "versionType": "git"}, {"version": "878dabb64117406abd40977b87544d05bb3031fc", "lessThan": "0a219432127d396120fc88cabd82785e0ff72a2f", "status": "affected", "versionType": "git"}, {"version": "878dabb64117406abd40977b87544d05bb3031fc", "lessThan": "1775c7ddacfcea29051c67409087578f8f4d751b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ceph/export.c"], "versions": [{"version": "5.8", "status": "affected"}, {"version": "0", "lessThan": "5.8", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.120", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.38", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.11.22", "lessThanOrEqual": "5.11.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.5", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/2ad8af2b70e986284050213230428b823b950a38"}, {"url": "https://git.kernel.org/stable/c/bf45c9fe99aa8003d2703f1bd353f956dea47e40"}, {"url": "https://git.kernel.org/stable/c/22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc"}, {"url": "https://git.kernel.org/stable/c/0a219432127d396120fc88cabd82785e0ff72a2f"}, {"url": "https://git.kernel.org/stable/c/1775c7ddacfcea29051c67409087578f8f4d751b"}], "title": "ceph: fix inode leak on getattr error in __fh_to_dentry", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-02-28T18:47:48.907996Z", "id": "CVE-2021-47000", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-01T14:20:55.600Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:38.544Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2ad8af2b70e986284050213230428b823b950a38", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/bf45c9fe99aa8003d2703f1bd353f956dea47e40", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0a219432127d396120fc88cabd82785e0ff72a2f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1775c7ddacfcea29051c67409087578f8f4d751b", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2ad8af2b70e986284050213230428b823b950a38", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/bf45c9fe99aa8003d2703f1bd353f956dea47e40", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0a219432127d396120fc88cabd82785e0ff72a2f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1775c7ddacfcea29051c67409087578f8f4d751b", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:38.544Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2021-47000", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-28T18:47:48.907996Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:13.590Z"}}], "cna": {"title": "ceph: fix inode leak on getattr error in __fh_to_dentry", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "807460787179dee5f74906965eeb5f3ca2353992", "lessThan": "2ad8af2b70e986284050213230428b823b950a38", "versionType": "git"}, {"status": "affected", "version": "878dabb64117406abd40977b87544d05bb3031fc", "lessThan": "bf45c9fe99aa8003d2703f1bd353f956dea47e40", "versionType": "git"}, {"status": "affected", "version": "878dabb64117406abd40977b87544d05bb3031fc", "lessThan": "22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc", "versionType": "git"}, {"status": "affected", "version": "878dabb64117406abd40977b87544d05bb3031fc", "lessThan": "0a219432127d396120fc88cabd82785e0ff72a2f", "versionType": "git"}, {"status": "affected", "version": "878dabb64117406abd40977b87544d05bb3031fc", "lessThan": "1775c7ddacfcea29051c67409087578f8f4d751b", "versionType": "git"}], "programFiles": ["fs/ceph/export.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.8"}, {"status": "unaffected", "version": "0", "lessThan": "5.8", "versionType": "semver"}, {"status": "unaffected", "version": "5.4.120", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.38", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.11.22", "versionType": "semver", "lessThanOrEqual": "5.11.*"}, {"status": "unaffected", "version": "5.12.5", "versionType": "semver", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ceph/export.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/2ad8af2b70e986284050213230428b823b950a38"}, {"url": "https://git.kernel.org/stable/c/bf45c9fe99aa8003d2703f1bd353f956dea47e40"}, {"url": "https://git.kernel.org/stable/c/22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc"}, {"url": "https://git.kernel.org/stable/c/0a219432127d396120fc88cabd82785e0ff72a2f"}, {"url": "https://git.kernel.org/stable/c/1775c7ddacfcea29051c67409087578f8f4d751b"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix inode leak on getattr error in __fh_to_dentry"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T07:33:20.914Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47000", "state": "PUBLISHED", "dateUpdated": "2024-12-19T07:33:20.914Z", "dateReserved": "2024-02-27T18:42:55.950Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-02-28T08:13:22.868Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C1AC017D-A815-45DD-8A8F-86CF8BD99D74", "versionEndExcluding": "5.4.120", "versionStartIncluding": "5.4.49", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "48EEEAD2-D08A-422C-8830-6CCF86E89E64", "versionEndExcluding": "5.10.38", "versionStartIncluding": "5.8", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "83B53E9A-F426-4C03-9A5F-A931FF79827E", "versionEndExcluding": "5.11.22", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0274929A-B36C-4F4C-AB22-30A0DD6B995B", "versionEndExcluding": "5.12.5", "versionStartIncluding": "5.12", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix inode leak on getattr error in __fh_to_dentry"}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ceph: corrige la fuga de inodo en el error getattr en __fh_to_dentry"}], "id": "CVE-2021-47000", "lastModified": "2025-03-14T18:59:18.127", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-02-28T09:15:38.170", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0a219432127d396120fc88cabd82785e0ff72a2f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1775c7ddacfcea29051c67409087578f8f4d751b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2ad8af2b70e986284050213230428b823b950a38"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bf45c9fe99aa8003d2703f1bd353f956dea47e40"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0a219432127d396120fc88cabd82785e0ff72a2f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1775c7ddacfcea29051c67409087578f8f4d751b"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/22fa4c8288f1ec40f6d62d7a32c57ac176f9f0bc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2ad8af2b70e986284050213230428b823b950a38"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bf45c9fe99aa8003d2703f1bd353f956dea47e40"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}