Log in Start free

Vulnerability · Published Aug 24, 2022 · Assigned by redhat

CVE-2021-4037Kernel: security regression for cve-2018-13405

Medium 4.4

In plain English

A medium-severity improper access control in kernel from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.3%top 72.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-abi-stablelists4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-core4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-cross-headers4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-debug4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-debug-core4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-debug-devel4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-debug-modules4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-debug-modules-extra4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-devel4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-doc4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-headers4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-modules4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-modules-extra4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-tools4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-tools-libs4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8kernel-tools-libs-devel4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8perf4.18.0-372.9.1.el8ALSA-2022:1988
AlmaLinux:8python3-perf4.18.0-372.9.1.el8ALSA-2022:1988
Debian:12linux5.14.6-1DEBIAN-CVE-2021-4037
Debian:13linux5.14.6-1DEBIAN-CVE-2021-4037
Debian:14linux5.14.6-1DEBIAN-CVE-2021-4037
Rocky Linux:8kernel0:4.18.0-372.9.1.el8RLSA-2022:1988
Rocky Linux:8kernel-rt0:4.18.0-372.9.1.rt7.166.el8RLSA-2022:1975
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-4037
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-4037
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-4037

Affected products (as reported)

VendorProductVersions
Linux kernel * – before 5.4.2415.5 – before 5.10.146
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

References