CVE-2021-46971— perf/core: Fix unconditional security_locked_down() call
Possible ATT&CK Techniques 1AI
T1564.004 · NTFS File AttributesAffected Version Matrix 12
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | b0c8fdc7fdb77586c3d1937050925b960743306e< b246759284d6a2bc5b6f1009caeeb3abce2ec9ff | affected |
b0c8fdc7fdb77586c3d1937050925b960743306e< 4348d3b5027bc3ff6336368b6c60605d4ef8e1ce | affected | ||
b0c8fdc7fdb77586c3d1937050925b960743306e< f5809ca4c311b71bfaba6d13f4e39eab0557895e | affected | ||
b0c8fdc7fdb77586c3d1937050925b960743306e< c7b0208ee370b89d20486fae71cd9abb759819c1 | affected | ||
b0c8fdc7fdb77586c3d1937050925b960743306e< 08ef1af4de5fe7de9c6d69f1e22e51b66e385d9b | affected | ||
5.4 | affected | ||
< 5.4 | unaffected | ||
5.4.117≤ 5.4.* | unaffected | ||
| … +4 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-46971
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
perf/core: Fix unconditional security_locked_down() call
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix unconditional security_locked_down() call Currently, the lockdown state is queried unconditionally, even though its result is used only if the PERF_SAMPLE_REGS_INTR bit is set in attr.sample_type. While that doesn't matter in case of the Lockdown LSM, it causes trouble with the SELinux's lockdown hook implementation. SELinux implements the locked_down hook with a check whether the current task's type has the corresponding "lockdown" class permission ("integrity" or "confidentiality") allowed in the policy. This means that calling the hook when the access control decision would be ignored generates a bogus permission check and audit record. Fix this by checking sample_type first and only calling the hook when its result would be honored.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于锁定状态是无条件查询的，即使只有在 attr.sample_type 中设置了 PERF_SAMPLE_REGS_INTR 位时才使用其结果。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-46971
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-46971
请登录查看更多情报信息。
Other References for CVE-2021-46971 (4)
Same Patch Batch · Linux · 2024-02-27 · 67 CVEs total
| CVE-2021-46911 | 9.8 CRITICAL | ch_ktls: Fix kernel panic |
| CVE-2021-46955 | 8.2 HIGH | openvswitch: fix stack OOB read while fragmenting IPv4 packets |
| CVE-2021-46936 | 7.8 HIGH | net: fix use-after-free in tw_timer_handler |
| CVE-2021-46913 | 7.8 HIGH | netfilter: nftables: clone set element expression template |
| CVE-2021-46973 | 7.8 HIGH | net: qrtr: Avoid potential use after free in MHI send |
| CVE-2021-46969 | 7.8 HIGH | bus: mhi: core: Fix invalid error returning in mhi_queue |
| CVE-2021-46967 | 7.8 HIGH | vhost-vdpa: fix vm_flags for virtqueue doorbell mapping |
| CVE-2021-46921 | 7.8 HIGH | locking/qrwlock: Fix ordering in queued_write_lock_slowpath() |
| CVE-2021-46925 | 7.8 HIGH | net/smc: fix kernel panic caused by race of smc_sock |
| CVE-2021-46963 | 7.8 HIGH | scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() |
| CVE-2021-46929 | 7.8 HIGH | sctp: use call_rcu to free endpoint |
| CVE-2021-46958 | 7.8 HIGH | btrfs: fix race between transaction aborts and fsyncs leading to use-after-free |
| CVE-2021-46933 | 7.8 HIGH | usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. |
| CVE-2021-46922 | 7.8 HIGH | KEYS: trusted: Fix TPM reservation for seal/unseal |
| CVE-2021-46960 | 7.5 HIGH | cifs: Return correct error code from smb2_get_enc_key |
| CVE-2021-46948 | 7.5 HIGH | sfc: farch: fix TX queue lookup in TX event handling |
| CVE-2021-46912 | 7.3 HIGH | net: Make tcp_allowed_congestion_control readonly in non-init netns |
| CVE-2021-46974 | 7.1 HIGH | bpf: Fix masking negation logic upon negative dst register |
| CVE-2021-46908 | 7.1 HIGH | bpf: Use correct permission flag for mixed signed bounds arithmetic |
| CVE-2021-46910 | 7.0 HIGH | ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled |
Showing top 20 of 67 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
Same vendor: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. Comments for CVE-2021-46971
No comments yet