CVE-2021-47504 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure task_work gets run as part of cancelations If we successfully cancel a work item but that work item needs to be processed through task_work, then we can be sleeping uninterruptibly in io_uring_cancel_generic() and never process it. Hence we don't make forward progress and we end up with an uninterruptible sleep warning. While in there, correct a comment that should be IFF, not IIF.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/78a780602075d8b00c98070fa26e389b3b3efa72
https://git.kernel.org/stable/c/8e12976c0c19ebc14b60046b1348c516a74c25a2
https://nvd.nist.gov/vuln/detail/CVE-2021-47504
https://www.cve.org/CVERecord?id=CVE-2021-47504

History

Mon, 04 Nov 2024 12:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-24T15:01:51.013Z

Updated: 2024-11-04T12:07:12.467Z

Reserved: 2024-05-22T06:20:56.205Z

Link: CVE-2021-47504

Vulnrichment

Updated: 2024-08-04T05:39:59.615Z

NVD

Status : Awaiting Analysis

Published: 2024-05-24T15:15:10.773

Modified: 2024-05-24T18:09:20.027

Link: CVE-2021-47504

Redhat

Severity : Low

Publid Date: 2024-05-24T00:00:00Z

Links: CVE-2021-47504 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47504", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-22T06:20:56.205Z", "datePublished": "2024-05-24T15:01:51.013Z", "dateUpdated": "2024-11-04T12:07:12.467Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:07:12.467Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: ensure task_work gets run as part of cancelations\n\nIf we successfully cancel a work item but that work item needs to be\nprocessed through task_work, then we can be sleeping uninterruptibly\nin io_uring_cancel_generic() and never process it. Hence we don't\nmake forward progress and we end up with an uninterruptible sleep\nwarning.\n\nWhile in there, correct a comment that should be IFF, not IIF."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/io_uring.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "8e12976c0c19", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "78a780602075", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/io_uring.c"], "versions": [{"version": "5.15.8", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.16", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/8e12976c0c19ebc14b60046b1348c516a74c25a2"}, {"url": "https://git.kernel.org/stable/c/78a780602075d8b00c98070fa26e389b3b3efa72"}], "title": "io_uring: ensure task_work gets run as part of cancelations", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-14T18:38:00.409763Z", "id": "CVE-2021-47504", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-14T18:38:32.174Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:39:59.615Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/8e12976c0c19ebc14b60046b1348c516a74c25a2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/78a780602075d8b00c98070fa26e389b3b3efa72", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/8e12976c0c19ebc14b60046b1348c516a74c25a2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/78a780602075d8b00c98070fa26e389b3b3efa72", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:39:59.615Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47504", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-14T18:38:00.409763Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-14T18:38:24.279Z"}}], "cna": {"title": "io_uring: ensure task_work gets run as part of cancelations", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "8e12976c0c19", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "78a780602075", "versionType": "git"}], "programFiles": ["fs/io_uring.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "5.15.8", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/io_uring.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/8e12976c0c19ebc14b60046b1348c516a74c25a2"}, {"url": "https://git.kernel.org/stable/c/78a780602075d8b00c98070fa26e389b3b3efa72"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: ensure task_work gets run as part of cancelations\n\nIf we successfully cancel a work item but that work item needs to be\nprocessed through task_work, then we can be sleeping uninterruptibly\nin io_uring_cancel_generic() and never process it. Hence we don't\nmake forward progress and we end up with an uninterruptible sleep\nwarning.\n\nWhile in there, correct a comment that should be IFF, not IIF."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:07:12.467Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47504", "state": "PUBLISHED", "dateUpdated": "2024-11-04T12:07:12.467Z", "dateReserved": "2024-05-22T06:20:56.205Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-24T15:01:51.013Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}