CVE-2021-47504

MEDIUM

Linux Kernel 5.1-5.15.7 - Denial of Service via io_uring Task Work Cancellation

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure task_work gets run as part of cancelations If we successfully cancel a work item but that work item needs to be processed through task_work, then we can be sleeping uninterruptibly in io_uring_cancel_generic() and never process it. Hence we don't make forward progress and we end up with an uninterruptible sleep warning. While in there, correct a comment that should be IFF, not IIF.

Scores

CVSS v3 5.5
EPSS 0.0021
EPSS Percentile 10.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (8)
Linux/Linux < 5.1
Linux/Linux 2b188cc1bb857a9d4701ae59aa7768b5124e262e - 78a780602075d8b00c98070fa26e389b3b3efa72
Linux/Linux 2b188cc1bb857a9d4701ae59aa7768b5124e262e - 8e12976c0c19ebc14b60046b1348c516a74c25a2
Linux/Linux 5.1
Linux/Linux 5.15.8 - 5.15.*
Linux/Linux 5.16
linux/linux_kernel 5.16 rc1 (4 CPE variants)
linux/linux_kernel 5.1 - 5.15.8
Published May 24, 2024
Tracked Since Feb 18, 2026