Vulnerability in Linux

CVE-2021-46920

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bits. Write back the bits actually read instead so the driver avoids clobbering the OVERFLOW bit that comes after the register is read.

EPSS: 0.002 (12.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

References

Frequently asked questions

What is CVE-2021-46920?
CVE-2021-46920 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-02-27.
How severe is CVE-2021-46920?
Medium severity. CVSS v3 base score is 5.5 out of 10.