CVE-2021-4023

2022-03-0916:49:04

CWE-200

redhat

www.cve.org

flaw

io-workqueue

local user

crash

system

AI Score

5.6

Confidence

High

EPSS

Percentile

5.1%

JSON

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to execute io-uring requests to possibly crash the system.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "kernel versions prior to 5.15-rc1"
      }
    ]
  }
]