PT-2019-6247 · Linux+6 · Linux Kernel+6

Dhananjay Arunesh · Published 2019-07-24 · Updated 2022-06-14 · CVE-2021-20317

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was found in the Linux kernel, specifically in the timerqueue add function in lib/timerqueue.c, caused by a corrupted timer tree. This issue allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP. The flaw is related to errors in memory initialization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

ALSA-2021:4647

ALT-PU-2019-3291

ALT-PU-2019-3343

ALT-PU-2019-3369

ALT-PU-2020-1198

ALT-PU-2020-1421

ALT-PU-2020-1450

ALT-PU-2020-1501

ALT-PU-2020-1714

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2022-05889

CESA-2021_4646

CESA-2021_4647

CVE-2021-20317

DLA-2843-1

DLA-2941-1

DSA-5096-1

OESA-2021-1379

RHSA-2021:4646

RHSA-2021:4647

RHSA-2021:4648

RHSA-2021:4650

RHSA-2021:4871

RHSA-2021:4875

RHSA-2021_4646

RHSA-2021_4647

RLSA-2021:4646

RLSA-2021:4647

USN-5209-1

USN-5343-1

Affected Products

Alt Linux

Almalinux

Centos

Linux Kernel

Red Hat

Rocky Linux

Ubuntu

References · 93

• https://osv.dev/vulnerability/DEBIAN-CVE-2021-20317 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-26555 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33034 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-0129 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25670 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3573 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3764 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-20317 · Security Note
• https://errata.rockylinux.org/RLSA-2021:4646 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2853 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20292 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-36322 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-38208 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40490 · Vendor Advisory