CVE-2021-45868

In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file.

• CWE-416

• https://bugzilla.kernel.org/show_bug.cgi?id=214655Exploit, Issue Tracking, Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3Mailing List, Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9bf3d20331295b1ecb81f4ed9ef358c51699a050Mailing List, Patch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220419-0003/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/03/17/1Exploit, Mailing List, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/03/17/2Exploit, Mailing List, Patch, Third Party Advisory
• https://bugzilla.kernel.org/show_bug.cgi?id=214655Exploit, Issue Tracking, Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3Mailing List, Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9bf3d20331295b1ecb81f4ed9ef358c51699a050Mailing List, Patch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220419-0003/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/03/17/1Exploit, Mailing List, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/03/17/2Exploit, Mailing List, Patch, Third Party Advisory

Published

Mar 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45860An integer overflow in DTSStreamReader::findFrame() of tsMux…5.5
• CVE-2021-45861There is an Assertion `num <= INT_BIT' failed at BitStreamRe…5.5
• CVE-2021-45863tsMuxer git-2678966 was discovered to contain a heap-based b…5.5
• CVE-2021-45864tsMuxer git-c6a0277 was discovered to contain a segmentation…5.5
• CVE-2021-45865A File Upload vulnerability exists in Sourcecodester Student…9.8
• CVE-2021-45866A Stored Cross Site Scripting (XSS) vulnerability exists in …5.4
• CVE-2021-45876Multiple versions of GARO Wallbox GLB/GTB/GTC are affected b…9.8
• CVE-2021-45877Multiple versions of GARO Wallbox GLB/GTB/GTC are affected b…9.8
• CVE-2021-45878Multiple versions of GARO Wallbox GLB/GTB/GTC are affected b…9.1
• CVE-2021-45884In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNA…7.5
• CVE-2021-45885An issue was discovered in Stormshield Network Security (SNS…7.5
• CVE-2021-45886An issue was discovered in PONTON X/P Messenger before 3.11.…8.8