PT-2024-11080 · Linux+2 · Linux Kernel+2

Ondrej Mosnacek · Published 2021-02-24 · Updated 2025-01-08 · CVE-2021-46971

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from the unconditional querying of the lockdown state in the Linux kernel's perf/core, specifically when the PERF SAMPLE REGS INTR bit is set in attr.sample type. This causes trouble with the SELinux's lockdown hook implementation, as it generates a bogus permission check and audit record when the access control decision would be ignored. The problem is fixed by checking sample type first and only calling the hook when its result would be honored.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-413

Related Identifiers

BDU:2025-04376

CVE-2021-46971

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 351

• https://osv.dev/vulnerability/CVE-2021-46971 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46971 · Security Note
• https://bdu.fstec.ru/vul/2025-04376 · Security Note
• https://git.kernel.org/stable/c/f5809ca4c311b71bfaba6d13f4e39eab0557895e · Patch
• https://ubuntu.com/security/CVE-2021-46971 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46971 · Vendor Advisory
• https://git.kernel.org/stable/c/c7b0208ee370b89d20486fae71cd9abb759819c1 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-46971 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-46971 · Vendor Advisory
• https://git.kernel.org/stable/c/b246759284d6a2bc5b6f1009caeeb3abce2ec9ff · Patch
• https://git.kernel.org/stable/c/4348d3b5027bc3ff6336368b6c60605d4ef8e1ce · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory
• https://git.kernel.org/stable/c/08ef1af4de5fe7de9c6d69f1e22e51b66e385d9b · Patch