Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2021-47254 Details

Description

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put(). On the shrink scan path, the same flag is cleared under lru_lock but because of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the put side can be made without deleting the glock from the lru list. Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both sides - clear GLF_LRU after list_del under lru_lock.

Metrics

CVSS 3.x Severity and Vector Strings:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 4.4.181, < 4.4.274
>= 4.9.180, < 4.9.274
>= 4.14.123, < 4.14.238
>= 4.19.47, < 4.19.196
>= 5.0.20, < 5.1

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

9 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2021-47254
NVD Published Date:
May 21, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2021-47254 Details - Not Deferred