PT-2024-11456 · Linux+2 · Linux Kernel+2
Syzbot
·
Published
2021-10-18
·
Updated
2025-02-03
·
CVE-2021-47462
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.15.0-rc2-syzkaller #0
Description
A vulnerability in the Linux kernel has been resolved, which was caused by the commit bda420b98505 that added a new bit in MPOL MODE FLAGS but only checked valid combinations in do set mempolicy(). The patch moves the check in sanitize mpol flags() to also be used by mbind(). Syzbot reported access to uninitialized memory in mbind(). The issue can lead to a kernel panic.
Recommendations
To resolve the issue, update the Linux kernel to a version that includes the patch that moves the check in sanitize mpol flags() to also be used by mbind().
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use of Uninitialized Resource
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse