#VU93209 Resource management error in Linux kernel - CVE-2021-47034

Vulnerability identifier: #VU93209

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47034

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the early_map_kernel_page() and __map_kernel_page() functions in arch/powerpc/mm/pgtable-radix.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/b3d5d0983388d6c4fb35f7d722556d5595f167a7
https://git.kernel.org/stable/c/73f9dccb29e4f82574bec2765c0090cdb0404301
https://git.kernel.org/stable/c/84c0762633f2a7ac8399e6b97d3b9bb8e6e1d50f
https://git.kernel.org/stable/c/01ac203e2119d8922126886ddea309fb676f955f
https://git.kernel.org/stable/c/e40c52ee67b155ad59f59e73ea136d02685f0e0d
https://git.kernel.org/stable/c/b8b2f37cf632434456182e9002d63cbc4cccc50c

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.