CVE-2021-4023CWE-200

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1

published March 9, 2022

CVSS
—
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to execute io-uring requests to possibly crash the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-03-09T16:49Z
EPSS history
Timeline
  • 09 MAR 16:49Z
    A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1
    cvelistv5