CVE-2021-47374CWE-770denial-of-service

CVE-2021-47374

High · published May 21, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
42.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dma-debug: prevent an error message from causing runtime problems

For some drivers, that use the DMA API. This error message can be reached

several millions of times per second, causing spam to the kernel's printk

buffer and bringing the CPU usage up to 100% (so, it should be rate

limited). However, since there is at least one driver that is in the

mainline and suffers from the error condition, it is more useful to

err_printk() here instead of just rate limiting the error message (in hopes

that it will make it easier for other drivers that suffer from this issue

to be spotted).

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.4th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-05-21T19:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel< 5.14.95.14.9
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 21 MAY 15:03Z
    dma-debug: prevent an error message from causing runtime problems
    cvelistv5