Every CVE Search/ Get API key

CVE-2021-3802

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image...

4.2 MediumFix available

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.91%Up 0.3 points since Nov 30, 2021
90%50%10%1%

What each source reports

NVD Score used 4.2

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-3802
CVSS 3.1
4.2 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
6.3 MediumAV:N/AC:M/Au:S/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-3802
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2021-27061 No score

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
EUVD-2021-27061
Updated
2026-11-03
GitHub AdvisoriesGHSA-p3gq-xgj7-pfr7 4.2

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image...

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
GHSA-p3gq-xgj7-pfr7
CVSS 3.1
4.2 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVAZL-78300 4.2

CVE-2021-3802 affecting package udisks2 2.9.4-6

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
AZL-78300
CVSS 3.1
4.2 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.2

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-3802
CVSS 3.1
4.2 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2021-3802 4.2

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
DEBIAN-CVE-2021-3802
CVSS 3.1
4.2 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2022-1489 4.2

udisks2 security update

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies.

Security Fix(es):

Vulnerability found in udisks2. The vulnerability allows an attacker to enter a specially crafted image file/USB to cause a kernel panic. The biggest threat to this vulnerability is system availability.(CVE-2021-3802)

Record
OESA-2022-1489
CVSS 3.1
4.2 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:1820 4.5

Red Hat Security Advisory: udisks2 security and bug fix update

Record
RHSA-2022:1820
CVSS 3.1
4.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:1820 4.5

Low: udisks2 security and bug fix update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.

Security Fix(es):

  • udisks2: insecure defaults in user-accessible mount helpers allow for a DoS (CVE-2021-3802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

Record
RLSA-2022:1820
CVSS 3.1
4.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-3802 4.2

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
UBUNTU-CVE-2021-3802
CVSS 3.1
4.2 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:1820 No score

Low: udisks2 security and bug fix update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.

Security Fix(es):

  • udisks2: insecure defaults in user-accessible mount helpers allow for a DoS (CVE-2021-3802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:1820
Updated
2026-11-02
OSVMGASA-2021-0529 No score

Updated udisks2/libblockdev packages fix security vulnerability

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

Record
MGASA-2021-0529
Updated
2026-11-02
OSVSUSE-SU-2022:1919-1 No score

Security update for udisks2

This update for udisks2 fixes the following issues:

  • CVE-2021-3802: Fixed denial of service vulnerability caused by insecure defaults in user-accessible mount helpers (bsc#1190606).
Record
SUSE-SU-2022:1919-1
Updated
2026-11-02
OSVSUSE-SU-2022:3154-1 No score

Security update for udisks2

This update for udisks2 fixes the following issues:

  • CVE-2021-3802: Fixed insecure defaults in user-accessible mount helpers (bsc#1190606).
  • Fixed vulnerability that allowed mounting ext4 devices over existing entries in fstab (bsc#1098797).
Record
SUSE-SU-2022:3154-1
Updated
2026-11-02
OSVSUSE-SU-2022:3160-1 No score

Security update for udisks2

This update for udisks2 fixes the following issues:

  • CVE-2021-3802: Fixed insecure defaults in user-accessible mount helpers (bsc#1190606).
  • Fixed vulnerability that allowed mounting ext4 devices over existing entries in fstab (bsc#1098797).
Record
SUSE-SU-2022:3160-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libudisks2
AlmaLinux:8
 before 2.9.0-9.el8
2.9.0-9.el8
libudisks2-devel
AlmaLinux:8
 before 2.9.0-9.el8
2.9.0-9.el8
udisks2
AlmaLinux:8
 before 2.9.0-9.el8
2.9.0-9.el8
udisks2-iscsi
AlmaLinux:8
 before 2.9.0-9.el8
2.9.0-9.el8
udisks2-lsm
AlmaLinux:8
 before 2.9.0-9.el8
2.9.0-9.el8
udisks2-lvm2
AlmaLinux:8
 before 2.9.0-9.el8
2.9.0-9.el8
udisks2
Azure Linux:3
 through 2.9.4-6 None known
udisks2
Debian:12
 before 2.9.4-1
2.9.4-1
udisks2
Debian:13
 before 2.9.4-1
2.9.4-1
udisks2
Debian:14
 before 2.9.4-1
2.9.4-1
Show 43 moreShow less
Affected packages
PackageAffectedFixed
udisks2
Debian:9
 before 2.1.8-1+deb9u1, plus listed versions
2.1.8-1
2.1.8-1+deb9u1
udisks2
Debian:10
 before 2.8.1-4+deb10u1, plus listed versions
2.8.1-4
2.8.1-4+deb10u1
udisks2
Mageia:8
 before 2.9.4-1.mga8
2.9.4-1.mga8
libblockdev
Mageia:8
 before 2.26-1.mga8
2.26-1.mga8
udisks2
openEuler:20.03-LTS-SP1
 before 2.9.0-3.oe1
2.9.0-3.oe1
udisks2
openEuler:20.03-LTS-SP2
 before 2.9.0-3.oe1
2.9.0-3.oe1
udisks2
openEuler:20.03-LTS-SP3
 before 2.9.0-3.oe1
2.9.0-3.oe1
libudisks2
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
libudisks2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-iscsi
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-iscsi-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-lsm
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-lsm-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-lvm2
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-lvm2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
libudisks2-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
libudisks2-devel
Red Hat:enterprise_linux:8::crb
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-iscsi-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-lsm-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2-lvm2-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2
Rocky Linux:8
 before 0:2.9.0-9.el8
0:2.9.0-9.el8
udisks2
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 2.9.2-150400.3.3.1
2.9.2-150400.3.3.1
udisks2
openSUSE:Leap 15.4
 before 2.9.2-150400.3.3.1
2.9.2-150400.3.3.1
udisks2
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 2.8.1-150200.3.3.1
2.8.1-150200.3.3.1
udisks2
openSUSE:Leap 15.3
 before 2.8.1-150200.3.3.1
2.8.1-150200.3.3.1
udisks2
SUSE:OpenStack Cloud 9
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
SUSE:OpenStack Cloud Crowbar 9
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
SUSE:Linux Enterprise Server 12 SP5
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.1.3-3.8.1
2.1.3-3.8.1
udisks2
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.1.0-42.1.1-12.1.1-1ubuntu12.1.2-12.1.3-12.1.3-1ubuntu0.12.1.3-1ubuntu0.1+esm1
 None known
udisks2
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.1.6-2ubuntu12.1.6-2+git12.1.7-12.1.7-1ubuntu12.1.7-1ubuntu1+esm1
 None known
udisks2
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.6.5-2ubuntu22.6.5-2ubuntu32.7.6-2ubuntu42.7.6-2ubuntu62.7.6-3
Show 4 moreShow less
2.7.6-3ubuntu0.12.7.6-3ubuntu0.22.7.6-3ubuntu0.2+esm12.7.6-3ubuntu0.2+esm2
 None known
udisks2
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.8.4-12.8.4-1build12.8.4-1ubuntu12.8.4-1ubuntu22.8.4-1ubuntu2+esm12.8.4-1ubuntu2+esm2
 None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3802 is a medium vulnerability (CVSS 4.2) in Udisks Project Udisks, published November 5, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.91%, the 60th percentile. Fixed in libudisks2 2.9.0-9.el8.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open