CVE-2021-43395
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/12/2022
Last modified:
08/08/2023
Description
An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle Solaris 10 and 11 is also affected.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:illumos:illumos:*:*:*:*:*:*:*:* | 2022-01-18 (excluding) | |
| cpe:2.3:o:omniosce:omnios:r151038:*:*:*:community:*:*:* | ||
| cpe:2.3:o:openindiana:openindiana:hipster_2021.04:*:*:*:*:*:*:* | ||
| cpe:2.3:o:joyent:smartos:20210923:*:*:*:*:*:*:* | ||
| cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:* | ||
| cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.tribblix.org/relnotes.html
- https://github.com/illumos/illumos-gate/blob/069654420de4aade43c63c43cd2896e66945fc8a/usr/src/uts/common/fs/tmpfs/tmp_vnops.c
- https://github.com/illumos/illumos-gate/blob/b3403853e80914bd0aade9b5b605da4878078173/usr/src/uts/common/fs/tmpfs/tmp_dir.c
- https://github.com/illumos/illumos-gate/commit/f859e7171bb5db34321e45585839c6c3200ebb90
- https://illumos.topicbox.com/groups/developer/T1c9e4f27f8c2f959/security-heads-up-illumos14424
- https://jgardner100.wordpress.com/2022/01/20/security-heads-up/
- https://kebe.com/blog/?p=505
- https://www.illumos.org/issues/14424
- https://www.oracle.com/security-alerts/cpujan2022.html