Files
CVEs-PoC/2021/CVE-2021-3428.md
T
2025-09-29 21:09:30 +02:00

18 lines
895 B
Markdown

### [CVE-2021-3428](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3428)
![](https://img.shields.io/static/v1?label=Product&message=kernel&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=Affects%20linux%20kernel%20before%20v5.9.%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-190%20-%20Integer%20Overflow%20or%20Wraparound&color=brightgreen)
### Description
A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4_es_cache_extent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem which can lead to an availability threat.
### POC
#### Reference
- https://ubuntu.com/security/CVE-2021-3428
#### Github
No PoCs found on GitHub currently.