CVE-2021-4023

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-10 · updated 2026-06-17
Weakness: CWE-200

Description

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to execute io-uring requests to possibly crash the system.

Affected products

Fedoraproject Fedora: 35
Linux kernel: through 5.14

References

https://bugzilla.redhat.com/show_bug.cgi?id=2026484
https://bugzilla.redhat.com/show_bug.cgi?id=2026484

Get alerted when CVE-2021-4023 or the next vulnerability affects your stack