CVE-2021-47504
MEDIUMLinux Kernel 5.1-5.15.7 - Denial of Service via io_uring Task Work Cancellation
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure task_work gets run as part of cancelations If we successfully cancel a work item but that work item needs to be processed through task_work, then we can be sleeping uninterruptibly in io_uring_cancel_generic() and never process it. Hence we don't make forward progress and we end up with an uninterruptible sleep warning. While in there, correct a comment that should be IFF, not IIF.
References (2)
Core 2
Scores
CVSS v3
5.5
EPSS
0.0021
EPSS Percentile
10.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (8)
Linux/Linux
< 5.1
Linux/Linux
2b188cc1bb857a9d4701ae59aa7768b5124e262e - 78a780602075d8b00c98070fa26e389b3b3efa72
Linux/Linux
2b188cc1bb857a9d4701ae59aa7768b5124e262e - 8e12976c0c19ebc14b60046b1348c516a74c25a2
Linux/Linux
5.1
Linux/Linux
5.15.8 - 5.15.*
Linux/Linux
5.16
linux/linux_kernel
5.16 rc1 (4 CPE variants)
linux/linux_kernel
5.1 - 5.15.8
Published
May 24, 2024
Tracked Since
Feb 18, 2026