CVE-2021-40490
HIGH
7
CVSS Score
Published: September 3, 2021 at 12:50 AM UTC
Updated: August 13, 2026 at 07:47 PM UTC
30 products affected across 4 vendorsLinux KernelDebian LinuxFedora
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7
Exploit prediction
EPSS 0.3%
Description
A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Debian Linux· Debiandrupal
95%3.8 ≤ v < 4.4.2844.10 ≤ v < 4.14.2474.15 ≤ v < 4.19.2074.20 ≤ v < 5.4.1454.5 ≤ v < 4.9.2835.11 ≤ v < 5.13.155.14 ≤ v < 5.14.25.5 ≤ v < 5.10.63
Affected range stops below 4.14.247, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.19.207, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.4.284, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.9.283, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.10.63, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.13.15, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.14.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.4.145, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=9e445093e523f3277081314c864f708fd4bd34aa
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6VS2DLGT7TK7URKAS2KWJL3S533SGVA/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJGX3DMJT6MRBW2XEF3TWVHYWZW3DG3N/
- https://www.debian.org/security/2021/dsa-4978
References (7)
x_refsource_MISCPatchVendor Advisory
Source: [email protected]
https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=9e445093e523f3277081314c864f708fd4bd34aaMailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2021/10/msg00010.htmlMailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2021/12/msg00012.htmlVendor Advisoryx_refsource_FEDORAThird Party Advisory
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6VS2DLGT7TK7URKAS2KWJL3S533SGVA/Vendor Advisoryx_refsource_FEDORABroken Link
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJGX3DMJT6MRBW2XEF3TWVHYWZW3DG3N/x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://security.netapp.com/advisory/ntap-20211004-0001/Vendor Advisoryx_refsource_DEBIANMailing ListThird Party Advisory
Source: [email protected]
https://www.debian.org/security/2021/dsa-4978CVSS
- Attack Vector
- LOCAL
- Complexity
- HIGH
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-362
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card