Lucene search

K
redhatcveRedhat.comRH:CVE-2021-47461
HistoryMay 23, 2024 - 11:06 a.m.

CVE-2021-47461

2024-05-2311:06:24
redhat.com
access.redhat.com
4
linux kernel
vulnerability
userfaultfd
race
writeprotect
exit_mmap
kasan
mmget_not_zero

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a race between writeprotect and exit_mmap() A race is possible when a process exits, its VMAs are removed by exit_mmap() and at the same time userfaultfd_writeprotect() is called. The race was detected by KASAN on a development kernel, but it appears to be possible on vanilla kernels as well. Use mmget_not_zero() to prevent the race as done in other userfaultfd operations.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%