What is CVE-2021-46950?

CVE-2021-46950 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, affecting Linux kernel versions from 4.14.147 onward and patched in 4.14.233, 4.19.191, 5.4.118 and others. CVE-2021-46950 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2021-46950?

CVE-2021-46950 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2021-46950?

Yes, CVE-2021-46950 has been patched. Fixed versions include 4.14.233, 4.19.191, 5.4.118 and others. If you are running Linux kernel 4.14.147 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2021-46950 actively exploited?

CVE-2021-46950 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2021-46950

High

In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being cleared. Since we are in the failure leg of raid1_end_write_request, the request either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).

Package Linux Kernel

Published 2024-02-27

Last modified 2025-04-22

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected versions

Linux kernel versions 4.14.147, 4.19.77, 5.2.19, 5.3.4, 5.4 and later are affected. Fixed in 4.14.233, 4.19.191, 5.4.118, 5.10.36, 5.11.20, 5.12.3, 5.13 and their respective stable series.

Affected from

≥ 4.14.147 ≥ 4.19.77 ≥ 5.2.19 ≥ 5.3.4 ≥ 5.4

Fixed in

✓ 4.14.233 4.14.x ✓ 4.19.191 4.19.x ✓ 5.4.118 5.4.x ✓ 5.10.36 5.10.x ✓ 5.11.20 5.11.x ✓ 5.12.3 5.12.x ✓ 5.13

References

7 total

Kernel Git
https://git.kernel.org/stable/c/12216d0919b64ee2ea5dc7a50e455670f44383d5

Patch
Kernel Git
https://git.kernel.org/stable/c/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd

Patch
Kernel Git
https://git.kernel.org/stable/c/538244fba59fde17186322776247cd9c05be86dd

Patch
Kernel Git
https://git.kernel.org/stable/c/59452e551784b7a57a45d971727e9db63b192515

Patch
Kernel Git
https://git.kernel.org/stable/c/661061a45e32d8b2cc0e306da9f169ad44011382

Patch

Showing 5 of 7 references View all on NVD

Details

CVE ID CVE-2021-46950

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2024-02-27

Modified 2025-04-22

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2021-46950?

CVE-2021-46950 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . It affects Linux kernel versions from 4.14.147 onward and has been patched in 4.14.233, 4.19.191, 5.4.118 and others. CVE-2021-46950 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2021-46950?

CVE-2021-46950 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2021-46950?

Yes. CVE-2021-46950 has been patched. Fixed versions include 4.14.233, 4.19.191, 5.4.118 and others. If you are running Linux kernel 4.14.147 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2021-46950 actively exploited?

No. CVE-2021-46950 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.