CVE-2021-4150

A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when device_add call fails when adding a partition to the disk.

• CWE-416
• CWE-416

• https://bugzilla.redhat.com/show_bug.cgi?id=2025938Issue Tracking, Third Party Advisory
• https://lkml.org/lkml/2021/10/18/485Exploit, Third Party Advisory
• https://lkml.org/lkml/2021/9/6/781Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2025938Issue Tracking, Third Party Advisory
• https://lkml.org/lkml/2021/10/18/485Exploit, Third Party Advisory
• https://lkml.org/lkml/2021/9/6/781Exploit, Third Party Advisory

Published

Mar 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41492Multiple SQL Injection vulnerabilities exist in Sourcecodest…9.8
• CVE-2021-41495Null Pointer Dereference vulnerability exists in numpy.sort …5.3
• CVE-2021-41496Buffer overflow in the array_from_pyobj function of fortrano…5.5
• CVE-2021-41497Null pointer reference in CMS_Conservative_increment_obj in …7.5
• CVE-2021-41498Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in t…7.5
• CVE-2021-41499Buffer Overflow Vulnerability exists in ajaxsoundstudio.com …7.5
• CVE-2021-41500Incomplete string comparison vulnerability exits in cvxopt.o…7.5
• CVE-2021-41502An issue was discovered in Subrion CMS v4.2.1 There is a sto…5.4
• CVE-2021-41503DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by…8
• CVE-2021-41504An Elevated Privileges issue exists in D-Link DCS-5000L v1.0…8
• CVE-2021-41506Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7…9.8
• CVE-2021-41511The username and password field of login in Lodging Reservat…9.8