// For flags

CVE-2021-33631

Kernel crash in EXT4 filesystem

Severity Score

7.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track
*SSVC
Descriptions

Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.

La vulnerabilidad de desbordamiento de enteros o envoltura en el kernel openEuler en Linux (módulos del sistema de archivos) permite el desbordamiento de enteros forzado. Este problema afecta al kernel de openEuler: desde 4.19.90 antes de 4.19.90-2401.3, desde 5.10.0-60.18.0 antes de 5.10.0-183.0 .0.

A flaw was found in the openEuler kernel in Linux filesystem modules that allows an integer overflow via mounting a corrupted filesystem. This issue affects the openEuler kernel in versions from 4.19.90 through 4.19.90-2401.3 and 5.10.0-60.18.0 through 5.10.0-183.0.0.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:Track
Exploitation
None
Automatable
No
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2021-05-28 CVE Reserved
  • 2024-01-18 CVE Published
  • 2024-02-08 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-190: Integer Overflow or Wraparound
CAPEC
  • CAPEC-92: Forced Integer Overflow
References (21)
URL Tag Source
http://www.openwall.com/lists/oss-security/2024/01/30/10
http://www.openwall.com/lists/oss-security/2024/01/30/3
http://www.openwall.com/lists/oss-security/2024/01/30/4
http://www.openwall.com/lists/oss-security/2024/01/30/5
http://www.openwall.com/lists/oss-security/2024/01/30/9
http://www.openwall.com/lists/oss-security/2024/01/31/2
http://www.openwall.com/lists/oss-security/2024/01/31/3
http://www.openwall.com/lists/oss-security/2024/02/02/6
http://www.openwall.com/lists/oss-security/2024/02/02/9
http://www.openwall.com/lists/oss-security/2024/02/03/1
https://gitee.com/src-openeuler/kernel/pulls/1389 Release Notes
https://gitee.com/src-openeuler/kernel/pulls/1396 Release Notes
URL Date SRC
URL Date SRC
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 2024-02-03
URL Date SRC
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 2024-02-03
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 2024-02-03
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032 2024-02-03
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033 2024-02-03
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034 2024-02-03
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035 2024-02-03
https://access.redhat.com/security/cve/CVE-2021-33631 2024-04-30
https://bugzilla.redhat.com/show_bug.cgi?id=2261976 2024-04-30
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Huawei
Search vendor "Huawei"
 Openeuler
Search vendor "Huawei" for product "Openeuler"
 >= 4.19.90 < 4.19.90-2401.3
Search vendor "Huawei" for product "Openeuler" and version " >= 4.19.90 < 4.19.90-2401.3"
-
Affected
Huawei
Search vendor "Huawei"
 Openeuler
Search vendor "Huawei" for product "Openeuler"
 >= 4.19.90 < 4.19.90-2401.3
Search vendor "Huawei" for product "Openeuler" and version " >= 4.19.90 < 4.19.90-2401.3"
linux
Affected
Huawei
Search vendor "Huawei"
 Openeuler
Search vendor "Huawei" for product "Openeuler"
 >= 5.10.0-60.18.0 < 5.10.0-183.0.0
Search vendor "Huawei" for product "Openeuler" and version " >= 5.10.0-60.18.0 < 5.10.0-183.0.0"
-
Affected