Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0023 14.3 —
AFFECTED
Product Versions Fixed
Linux d624c96fb3249e5d3dcf4e60a805e5e6b0dd7d91 – —
Linux 3.8 – 5.10.51
TIMELINE
May 21 Reserved by Linux
May 21 Published (CNA: Linux)
Aug 11 ENRICHED — CVE-2021-47335 (Linux). Received CVSS 5.5 and CPE data from NVD.
Description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
As syzbot reported, there is an use-after-free issue during f2fs recovery:
Use-after-free write at 0xffff88823bc16040 (in kfence-#10):
kmem_cache_destroy+0x1f/0x120 mm/slab_common.c:486
f2fs_recover_fsync_data+0x75b0/0x8380 fs/f2fs/recovery.c:869
f2fs_fill_super+0x9393/0xa420 fs/f2fs/super.c:3945
mount_bdev+0x26c/0x3a0 fs/super.c:1367
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x86/0x270 fs/super.c:1497
do_new_mount fs/namespace.c:2905 [inline]
path_mount+0x196f/0x2be0 fs/namespace.c:3235
do_mount fs/namespace.c:3248 [inline]
__do_sys_mount fs/namespace.c:3456 [inline]
__se_sys_mount+0x2f9/0x3b0 fs/namespace.c:3433
do_syscall_64+0x3f/0xb0 arch/x86/entry/common.c:47
entry_SYSCALL_64_after_hwframe+0x44/0xae
The root cause is multi f2fs filesystem instances can race on accessing
global fsync_entry_slab pointer, result in use-after-free issue of slab
cache, fixes to init/destroy this slab cache only once during module
init/destroy procedure to avoid this issue.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| May 21, 2024 | Reserved | Reserved by Linux |
| May 21, 2024 | Published | Published (CNA: Linux) |
| August 11, 2026 | ENRICHED | ENRICHED — CVE-2021-47335 (Linux). Received CVSS 5.5 and CPE data from NVD. |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| Linux | Linux | — | d624c96fb3249e5d3dcf4e60a805e5e6b0dd7d91 | — |
| Linux | Linux | — | 3.8 | 5.10.51 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2021-47335 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.