Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-46919
HistoryFeb 27, 2024 - 12:00 a.m.

CVE-2021-46919

2024-02-2700:00:00
ubuntu.com
ubuntu.com
5
linux kernel
vulnerability
resolved
dmaengine
idxd
wq size
permission
fix
device state

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: fix wq size store permission state WQ size can only be
changed when the device is disabled. Current code allows change when device
is enabled but wq is disabled. Change the check to detect device state.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%