01 Record

CVE-2021-44879

In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 1.48% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 73.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-10-14.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2022-02-13 00:00Z4 YR AGO

Last updated

2026-10-14 11:58Z15 DAYS AGO

Reserved

2021-12-13

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

5d023918625190df50b36141f3585ec4773fed368579771ed94832c9ef051147

05 Affected products

VendorProductVersionsPlatforms

linuxlinux_kernelNot specified—

redhatenterprise_linuxNot specified—

06 References

cdn.kernel.orghttps://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3
bugzilla.kernel.orghttps://bugzilla.kernel.org/show_bug.cgi?id=215231
lore.kernel.orghttps://lore.kernel.org/linux-f2fs-devel/20211206144421.3735-3-chao%40kernel.org/T/
git.kernel.orghttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9056d6489f5a41cfbb67f719d2c0ce61ead72d9f
lists.debian.org[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security updatehttps://lists.debian.org/debian-lts-announce/2024/01/msg00004.htmlmailing-list
lists.debian.org[debian-lts-announce] 20240111 [SECURITY] [DLA 3711-1] linux-5.10 security updatehttps://lists.debian.org/debian-lts-announce/2024/01/msg00005.htmlmailing-list
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-831302.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-794697.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-613116.html

07 Fixed in

Arch Linux

linux-lts
No fix yet

Source: Arch Linux Security Tracker, the Arch Linux security team. Reformatted by exploit.cc.

Debian 12

linux
Fixed in 5.16.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 5.16.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 5.16.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.