Vulnerability identifier: #VU92050

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-46971

CWE-ID: CWE-667

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the SYSCALL_DEFINE5() function in kernel/events/core.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/b246759284d6a2bc5b6f1009caeeb3abce2ec9ff
http://git.kernel.org/stable/c/4348d3b5027bc3ff6336368b6c60605d4ef8e1ce
http://git.kernel.org/stable/c/f5809ca4c311b71bfaba6d13f4e39eab0557895e
http://git.kernel.org/stable/c/c7b0208ee370b89d20486fae71cd9abb759819c1
http://git.kernel.org/stable/c/08ef1af4de5fe7de9c6d69f1e22e51b66e385d9b

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.