CVE-2021-46919 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state WQ size can only be changed when the device is disabled. Current code allows change when device is enabled but wq is disabled. Change the check to detect device state.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Linux	Linux Kernel

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

No data.

References

Link	Providers
https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281
https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15fadd
https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037ae
https://nvd.nist.gov/vuln/detail/CVE-2021-46919
https://www.cve.org/CVERecord?id=CVE-2021-46919

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-02-27T06:53:56.714Z

Updated: 2024-08-04T05:17:42.993Z

Reserved: 2024-02-25T13:45:52.719Z

Link: CVE-2021-46919

Vulnrichment

Updated: 2024-07-05T15:20:37.720Z

NVD

Status : Analyzed

Published: 2024-02-27T07:15:08.787

Modified: 2024-04-10T14:46:43.057

Link: CVE-2021-46919

Redhat

Severity : Low

Publid Date: 2024-02-27T00:00:00Z

Links: CVE-2021-46919 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-46919", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-25T13:45:52.719Z", "datePublished": "2024-02-27T06:53:56.714Z", "dateUpdated": "2024-08-04T05:17:42.993Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T04:58:51.102Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: fix wq size store permission state\n\nWQ size can only be changed when the device is disabled. Current code\nallows change when device is enabled but wq is disabled. Change the check\nto detect device state."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/dma/idxd/sysfs.c"], "versions": [{"version": "c52ca478233c", "lessThan": "4ecf25595273", "status": "affected", "versionType": "git"}, {"version": "c52ca478233c", "lessThan": "05b7791c4c4a", "status": "affected", "versionType": "git"}, {"version": "c52ca478233c", "lessThan": "0fff71c5a311", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/dma/idxd/sysfs.c"], "versions": [{"version": "5.6", "status": "affected"}, {"version": "0", "lessThan": "5.6", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.32", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.11.16", "lessThanOrEqual": "5.11.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.12", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037ae"}, {"url": "https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281"}, {"url": "https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15fadd"}], "title": "dmaengine: idxd: fix wq size store permission state", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-46919", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-27T15:20:51.760162Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T17:21:03.865Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:17:42.993Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037ae", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15fadd", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-46919", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-27T15:20:51.760162Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T15:20:37.720Z"}}], "cna": {"title": "dmaengine: idxd: fix wq size store permission state", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c52ca478233c", "lessThan": "4ecf25595273", "versionType": "git"}, {"status": "affected", "version": "c52ca478233c", "lessThan": "05b7791c4c4a", "versionType": "git"}, {"status": "affected", "version": "c52ca478233c", "lessThan": "0fff71c5a311", "versionType": "git"}], "programFiles": ["drivers/dma/idxd/sysfs.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.6"}, {"status": "unaffected", "version": "0", "lessThan": "5.6", "versionType": "custom"}, {"status": "unaffected", "version": "5.10.32", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.11.16", "versionType": "custom", "lessThanOrEqual": "5.11.*"}, {"status": "unaffected", "version": "5.12", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/dma/idxd/sysfs.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037ae"}, {"url": "https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281"}, {"url": "https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15fadd"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: fix wq size store permission state\n\nWQ size can only be changed when the device is disabled. Current code\nallows change when device is enabled but wq is disabled. Change the check\nto detect device state."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T04:58:51.102Z"}}}, "cveMetadata": {"cveId": "CVE-2021-46919", "state": "PUBLISHED", "dateUpdated": "2024-07-05T17:21:03.865Z", "dateReserved": "2024-02-25T13:45:52.719Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-02-27T06:53:56.714Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "10B30767-6251-4101-9C1B-5F61DBAFA43A", "versionEndExcluding": "5.10.32", "versionStartIncluding": "5.6.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "3C5242B9-B5BD-4578-AD66-69DF59D54A14", "versionEndExcluding": "5.11.16", "versionStartIncluding": "5.11.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: fix wq size store permission state\n\nWQ size can only be changed when the device is disabled. Current code\nallows change when device is enabled but wq is disabled. Change the check\nto detect device state."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dmaengine: idxd: corregir el tama\u00f1o de wq estado del permiso de almacenamiento El tama\u00f1o de WQ solo se puede cambiar cuando el dispositivo est\u00e1 deshabilitado. El c\u00f3digo actual permite cambios cuando el dispositivo est\u00e1 habilitado pero wq est\u00e1 deshabilitado. Cambie la verificaci\u00f3n para detectar el estado del dispositivo."}], "id": "CVE-2021-46919", "lastModified": "2024-04-10T14:46:43.057", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-02-27T07:15:08.787", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15fadd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037ae"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: wq size store permission state", "id": "2266397", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266397"}, "csaw": false, "cvss3": {"cvss3_base_score": "0.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N", "status": "draft"}, "cwe": "CWE-20", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndmaengine: idxd: fix wq size store permission state\nWQ size can only be changed when the device is disabled. Current code\nallows change when device is enabled but wq is disabled. Change the check\nto detect device state.", "A flaw was found in the Linux Kernel. The WQ size can only be changed when the device is disabled. The current code allows change when the device is enabled but WQ is disabled. Change the check to detect the device state."], "name": "CVE-2021-46919", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Under investigation", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Under investigation", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Under investigation", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Under investigation", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Under investigation", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-02-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-46919\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-46919\nhttps://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281\nhttps://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15fadd\nhttps://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037ae"], "threat_severity": "Low"}