CVE-2021-47461CWE-362

CVE-2021-47461

High · published May 22, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: fix a race between writeprotect and exit_mmap()

A race is possible when a process exits, its VMAs are removed by

exit_mmap() and at the same time userfaultfd_writeprotect() is called.

The race was detected by KASAN on a development kernel, but it appears

to be possible on vanilla kernels as well.

Use mmget_not_zero() to prevent the race as done in other userfaultfd

operations.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00174 · 6.6th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-05-22T11:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 5.7, < 5.10.765.10.76
linux/linux_kernel≥ 5.11, < 5.14.155.14.15
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
EPSS history
Timeline
  • 22 MAY 06:23Z
    userfaultfd: fix a race between writeprotect and exit_mmap()
    cvelistv5