{"id":"CVE-2021-43395","aliases":["EUVD-2021-30330","GHSA-6w9w-8g4v-j4m6"],"status":"published","title":"An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS...","description":"An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle Solaris 10 and 11 is also affected.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00321,"percentile":0.25285,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-667"],"published":"2022-12-26T00:00:00Z","modified":"2026-06-17T04:10:54Z","products":[{"vendor":"illumos","product":"illumos"},{"vendor":"joyent","product":"smartos"},{"vendor":"omniosce","product":"omnios"},{"vendor":"openindiana","product":"openindiana"},{"vendor":"oracle","product":"solaris"}],"references":[{"url":"https://github.com/illumos/illumos-gate/blob/069654420de4aade43c63c43cd2896e66945fc8a/usr/src/uts/common/fs/tmpfs/tmp_vnops.c","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://github.com/illumos/illumos-gate/blob/b3403853e80914bd0aade9b5b605da4878078173/usr/src/uts/common/fs/tmpfs/tmp_dir.c","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_transferred","Patch","Third Party Advisory"]},{"url":"http://www.tribblix.org/relnotes.html","tags":["x_transferred","Release Notes","Third Party Advisory"]},{"url":"https://jgardner100.wordpress.com/2022/01/20/security-heads-up/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://illumos.topicbox.com/groups/developer/T1c9e4f27f8c2f959/security-heads-up-illumos14424","tags":["x_transferred","Vendor Advisory"]},{"url":"https://www.illumos.org/issues/14424","tags":["x_transferred","Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://github.com/illumos/illumos-gate/commit/f859e7171bb5db34321e45585839c6c3200ebb90","tags":["x_transferred","Patch","Third Party Advisory"]},{"url":"https://kebe.com/blog/?p=505","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43395"},{"url":"https://jgardner100.wordpress.com/2022/01/20/security-heads-up"},{"url":"https://github.com/advisories/GHSA-6w9w-8g4v-j4m6"}],"sources":{"cve":[{"id":"CVE-2021-43395","description":"An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle Solaris 10 and 11 is also affected.","status":"published","published":"2022-12-26T00:00:00Z","modified":"2025-04-14T16:10:08.182Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:32:57.033395Z"}],"euvd":[{"id":"EUVD-2021-30330","description":"An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle Solaris 10 and 11 is also affected.","status":"published","published":"2022-12-26T00:00:00Z","modified":"2025-04-14T16:10:08Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:33.465211Z"}],"ghsa":[{"id":"GHSA-6w9w-8g4v-j4m6","title":"An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS...","description":"An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle Solaris 10 and 11 is also affected.","status":"published","published":"2022-12-26T06:30:22Z","modified":"2025-04-14T18:32:45Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T15:01:31.517Z"}],"nvd":[{"id":"CVE-2021-43395","description":"An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle Solaris 10 and 11 is also affected.","status":"published","published":"2022-12-26T06:15:10.677Z","modified":"2026-06-17T04:10:54.56Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:07:07.323379Z"}]}}