VulnerabilityModified
CVE-2021-46919
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state WQ size can only be changed when the device is disabled.
MEDIUM 5.5EPSS 0.22%
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state WQ size can only be changed when the device is disabled. Current code allows change when device is enabled but wq is disabled. Change the check to detect device state.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.22% probability · 13th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281Patch
- https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15faddPatch
- https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037aePatch
- https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281Patch
- https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15faddPatch
- https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037aePatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.