What’s Vulnerable › Vulnerabilities

CVE-2021-46919: dmaengine: idxd: fix wq size store permission state

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-27 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state WQ size can only be changed when the device is disabled. Current code allows change when device is enabled but wq is disabled. Change the check to detect device state.

Affected products

• Linux kernel: from 5.6.0 before 5.10.32; from 5.11.0 before 5.11.16 — fixed in 5.10.32, 5.11.16

How to fix

Upgrade to a fixed version: Linux kernel 5.10.32, 5.11.16. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281
• https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15fadd
• https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037ae
• https://git.kernel.org/stable/c/05b7791c4c4aa8304368fdc55ae911f6b34e7281
• https://git.kernel.org/stable/c/0fff71c5a311e1264988179f7dcc217fda15fadd
• https://git.kernel.org/stable/c/4ecf25595273203010bc8318c4aee60ad64037ae

Get alerted when CVE-2021-46919 or the next vulnerability affects your stack