{"id":"CVE-2021-4037","revision":null,"records":[{"revision":"effb351e4c804f0294f0b446d4fb3581","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-4037","aliases":[],"title":"Kernel: security regression for cve-2018-13405","description":"A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.","state":0,"publishedAt":"2022-08-24T00:00:00+00:00","modifiedAt":"2026-10-14T10:04:01.692+00:00","affected":[{"ecosystem":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Linux\",\n \"product\": \"kernel\",\n \"versions\": [\n {\n \"status\": \"affected\",\n \"version\": \"*\",\n \"lessThan\": \"5.4.241\",\n \"versionType\": \"semver\"\n },\n {\n \"status\": \"affected\",\n \"version\": \"5.5\",\n \"lessThan\": \"5.10.146\",\n \"versionType\": \"semver\"\n },\n {\n \"status\": \"unaffected\",\n \"version\": \"5.12\",\n \"versionType\": \"semver\"\n }\n ],\n \"packageName\": \"kernel\",\n \"collectionURL\": \"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/\",\n \"defaultStatus\": \"unaffected\"\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kernel-rt","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kernel-rt\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.18.0-372.9.1.rt7.166.el8\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8::nfv\",\n \"cpe:/a:redhat:enterprise_linux:8::realtime\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kernel\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.18.0-372.9.1.el8\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8::crb\",\n \"cpe:/o:redhat:enterprise_linux:8::baseos\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kernel-rt","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kernel-rt\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.18.0-305.49.1.rt7.121.el8_4\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_eus:8.4::nfv\",\n \"cpe:/a:redhat:rhel_eus:8.4::realtime\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kernel\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.18.0-305.49.1.el8_4\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_eus:8.4::crb\",\n \"cpe:/o:redhat:rhel_eus:8.4::baseos\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 6\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kernel\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/o:redhat:enterprise_linux:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kernel\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/o:redhat:enterprise_linux:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kernel-rt","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kernel-rt\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/o:redhat:enterprise_linux:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kernel\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/o:redhat:enterprise_linux:9\"\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","score":4.4,"severity":"MEDIUM"}],"references":["https://access.redhat.com/errata/RHSA-2022:1975","https://access.redhat.com/errata/RHSA-2022:1988","https://access.redhat.com/errata/RHSA-2022:4829","https://access.redhat.com/errata/RHSA-2022:4835","https://access.redhat.com/security/cve/CVE-2021-4037","https://bugzilla.redhat.com/show_bug.cgi?id=2027239","https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=01ea173e103e","https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-4037","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-4037","identifiers":["CVE-2021-4037"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-10T05:04:17.0540934+00:00","complete":true,"records":1773,"lastAttemptAt":"2026-11-10T05:04:17.0540934+00:00","lastSuccessAt":"2026-11-10T05:04:18.9657904+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:18.9657907+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-8859cf40d4337e24bd2f258cc7778fbad01bb24c79d057aaf34cf1dfc6f8917d-77fffadfbb8fd9043950d68e58e30483f52900409642c6b646065548479c26cc","complete":true,"records":421868,"lastAttemptAt":"2026-11-10T05:02:16.4823631+00:00","lastSuccessAt":"2026-11-10T05:02:16.4560546+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:02:16.4823631+00:00","snapshotPublishedAt":"2026-11-10T04:28:56+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-a6dc967b5ceb4c488191e8f172ded5d6","complete":true,"records":13689,"lastAttemptAt":"2026-11-10T05:06:09.4504083+00:00","lastSuccessAt":"2026-11-10T03:04:49.903+00:00","error":null,"lastVerifiedAt":"2026-11-10T03:04:49.903+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13742,"expectedIdentifiers":13742,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-10T05:04:17.0540934+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-10T05:04:17.0540934+00:00","lastSuccessAt":"2026-11-10T05:04:18.9669147+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:18.9669149+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-0cb393c0854647ceaeade74220bf537d","complete":false,"records":13695,"lastAttemptAt":"2026-11-10T05:06:08.8352765+00:00","lastSuccessAt":"2026-11-10T05:06:08.831+00:00","error":"100 identifier lookups failed; latest failures include request timeout. Other identifiers were checked independently.","lastVerifiedAt":"2026-11-10T05:06:08.831+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13642,"expectedIdentifiers":13742,"failedIdentifiers":100},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-cdffb4589856378aa42e8d1bd4a6c74e27a180d8160bf764c44715ef760f0a62","complete":true,"records":9932,"lastAttemptAt":"2026-11-10T05:04:16.277674+00:00","lastSuccessAt":"2026-11-10T00:04:19.8260565+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:16.277674+00:00","snapshotPublishedAt":"2026-11-09T23:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-26503967ae4379db8f374089589d6e03fb15bd31f820c9e992aaf93840c2236c","complete":true,"records":1971,"lastAttemptAt":"2026-11-10T05:02:16.7857429+00:00","lastSuccessAt":"2026-11-09T21:02:20.472473+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:02:16.7857429+00:00","snapshotPublishedAt":"2026-11-09T20:18:18+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-761ecc9061239b0da572dc9254c6f384c1d19339eb08408c436647a2f26129e9","complete":true,"records":3064,"lastAttemptAt":"2026-11-10T05:04:16.6684448+00:00","lastSuccessAt":"2026-11-09T17:05:03.4044794+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:16.6684448+00:00","snapshotPublishedAt":"2026-11-09T16:33:20+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-df80ce3f4ee69a086fc0f8e2d917e586081af2af4d81ef20f64f97855436e748","complete":true,"records":231583,"lastAttemptAt":"2026-11-10T05:04:16.1480624+00:00","lastSuccessAt":"2026-11-10T05:04:14.7294031+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:16.1480624+00:00","snapshotPublishedAt":"2026-11-10T04:33:09+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}