GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2021-47462 (GCVE-0-2021-47462)

Vulnerability from cvelistv5 – Published: 2024-05-22 06:23 – Updated: 2026-05-11 13:55
VLAI
Title
mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()
Summary
In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind() syzbot reported access to unitialized memory in mbind() [1] Issue came with commit bda420b98505 ("numa balancing: migrate on fault among multiple bound nodes") This commit added a new bit in MPOL_MODE_FLAGS, but only checked valid combination (MPOL_F_NUMA_BALANCING can only be used with MPOL_BIND) in do_set_mempolicy() This patch moves the check in sanitize_mpol_flags() so that it is also used by mbind() [1] BUG: KMSAN: uninit-value in __mpol_equal+0x567/0x590 mm/mempolicy.c:2260 __mpol_equal+0x567/0x590 mm/mempolicy.c:2260 mpol_equal include/linux/mempolicy.h:105 [inline] vma_merge+0x4a1/0x1e60 mm/mmap.c:1190 mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811 do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333 kernel_mbind mm/mempolicy.c:1483 [inline] __do_sys_mbind mm/mempolicy.c:1490 [inline] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486 __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was created at: slab_alloc_node mm/slub.c:3221 [inline] slab_alloc mm/slub.c:3230 [inline] kmem_cache_alloc+0x751/0xff0 mm/slub.c:3235 mpol_new mm/mempolicy.c:293 [inline] do_mbind+0x912/0x15f0 mm/mempolicy.c:1289 kernel_mbind mm/mempolicy.c:1483 [inline] __do_sys_mbind mm/mempolicy.c:1490 [inline] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486 __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae ===================================================== Kernel panic - not syncing: panic_on_kmsan set ... CPU: 0 PID: 15049 Comm: syz-executor.0 Tainted: G B 5.15.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106 dump_stack+0x25/0x28 lib/dump_stack.c:113 panic+0x44f/0xdeb kernel/panic.c:232 kmsan_report+0x2ee/0x300 mm/kmsan/report.c:186 __msan_warning+0xd7/0x150 mm/kmsan/instrumentation.c:208 __mpol_equal+0x567/0x590 mm/mempolicy.c:2260 mpol_equal include/linux/mempolicy.h:105 [inline] vma_merge+0x4a1/0x1e60 mm/mmap.c:1190 mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811 do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333 kernel_mbind mm/mempolicy.c:1483 [inline] __do_sys_mbind mm/mempolicy.c:1490 [inline] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486 __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-22 19:48 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: bda420b985054a3badafef23807c4b4fa38a3dff , < 9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9 (git)
Affected: bda420b985054a3badafef23807c4b4fa38a3dff , < 6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.12
Unaffected: 0 , < 5.12 (semver)
Unaffected: 5.14.15 , ≤ 5.14.* (semver)
Unaffected: 5.15 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47462",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-22T19:48:07.390031Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:13:24.847Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.432Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "mm/mempolicy.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9",
              "status": "affected",
              "version": "bda420b985054a3badafef23807c4b4fa38a3dff",
              "versionType": "git"
            },
            {
              "lessThan": "6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c",
              "status": "affected",
              "version": "bda420b985054a3badafef23807c4b4fa38a3dff",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "mm/mempolicy.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.14.*",
              "status": "unaffected",
              "version": "5.14.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14.15",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()\n\nsyzbot reported access to unitialized memory in mbind() [1]\n\nIssue came with commit bda420b98505 (\"numa balancing: migrate on fault\namong multiple bound nodes\")\n\nThis commit added a new bit in MPOL_MODE_FLAGS, but only checked valid\ncombination (MPOL_F_NUMA_BALANCING can only be used with MPOL_BIND) in\ndo_set_mempolicy()\n\nThis patch moves the check in sanitize_mpol_flags() so that it is also\nused by mbind()\n\n  [1]\n  BUG: KMSAN: uninit-value in __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\n   __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\n   mpol_equal include/linux/mempolicy.h:105 [inline]\n   vma_merge+0x4a1/0x1e60 mm/mmap.c:1190\n   mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811\n   do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333\n   kernel_mbind mm/mempolicy.c:1483 [inline]\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\n\n  Uninit was created at:\n   slab_alloc_node mm/slub.c:3221 [inline]\n   slab_alloc mm/slub.c:3230 [inline]\n   kmem_cache_alloc+0x751/0xff0 mm/slub.c:3235\n   mpol_new mm/mempolicy.c:293 [inline]\n   do_mbind+0x912/0x15f0 mm/mempolicy.c:1289\n   kernel_mbind mm/mempolicy.c:1483 [inline]\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\n  =====================================================\n  Kernel panic - not syncing: panic_on_kmsan set ...\n  CPU: 0 PID: 15049 Comm: syz-executor.0 Tainted: G    B             5.15.0-rc2-syzkaller #0\n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\n  Call Trace:\n   __dump_stack lib/dump_stack.c:88 [inline]\n   dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106\n   dump_stack+0x25/0x28 lib/dump_stack.c:113\n   panic+0x44f/0xdeb kernel/panic.c:232\n   kmsan_report+0x2ee/0x300 mm/kmsan/report.c:186\n   __msan_warning+0xd7/0x150 mm/kmsan/instrumentation.c:208\n   __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\n   mpol_equal include/linux/mempolicy.h:105 [inline]\n   vma_merge+0x4a1/0x1e60 mm/mmap.c:1190\n   mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811\n   do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333\n   kernel_mbind mm/mempolicy.c:1483 [inline]\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\n   entry_SYSCALL_64_after_hwframe+0x44/0xae"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:55:11.463Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9"
        },
        {
          "url": "https://git.kernel.org/stable/c/6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c"
        }
      ],
      "title": "mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47462",
    "datePublished": "2024-05-22T06:23:23.034Z",
    "dateReserved": "2024-05-22T06:20:56.198Z",
    "dateUpdated": "2026-05-11T13:55:11.463Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-47462",
      "date": "2026-09-16",
      "epss": "0.0018",
      "percentile": "0.07846"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()\\n\\nsyzbot reported access to unitialized memory in mbind() [1]\\n\\nIssue came with commit bda420b98505 (\\\"numa balancing: migrate on fault\\namong multiple bound nodes\\\")\\n\\nThis commit added a new bit in MPOL_MODE_FLAGS, but only checked valid\\ncombination (MPOL_F_NUMA_BALANCING can only be used with MPOL_BIND) in\\ndo_set_mempolicy()\\n\\nThis patch moves the check in sanitize_mpol_flags() so that it is also\\nused by mbind()\\n\\n  [1]\\n  BUG: KMSAN: uninit-value in __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   mpol_equal include/linux/mempolicy.h:105 [inline]\\n   vma_merge+0x4a1/0x1e60 mm/mmap.c:1190\\n   mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811\\n   do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\\n\\n  Uninit was created at:\\n   slab_alloc_node mm/slub.c:3221 [inline]\\n   slab_alloc mm/slub.c:3230 [inline]\\n   kmem_cache_alloc+0x751/0xff0 mm/slub.c:3235\\n   mpol_new mm/mempolicy.c:293 [inline]\\n   do_mbind+0x912/0x15f0 mm/mempolicy.c:1289\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\\n  =====================================================\\n  Kernel panic - not syncing: panic_on_kmsan set ...\\n  CPU: 0 PID: 15049 Comm: syz-executor.0 Tainted: G    B             5.15.0-rc2-syzkaller #0\\n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\\n  Call Trace:\\n   __dump_stack lib/dump_stack.c:88 [inline]\\n   dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106\\n   dump_stack+0x25/0x28 lib/dump_stack.c:113\\n   panic+0x44f/0xdeb kernel/panic.c:232\\n   kmsan_report+0x2ee/0x300 mm/kmsan/report.c:186\\n   __msan_warning+0xd7/0x150 mm/kmsan/instrumentation.c:208\\n   __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   mpol_equal include/linux/mempolicy.h:105 [inline]\\n   vma_merge+0x4a1/0x1e60 mm/mmap.c:1190\\n   mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811\\n   do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: mm/mempolicy: no permitir MPOL_F_NUMA_BALANCING ilegal | MPOL_LOCAL en mbind() syzbot inform\\u00f3 acceso a la memoria unificada en mbind() [1] El problema surgi\\u00f3 con el commit bda420b98505 (\\\"equilibrio numa: migrar en caso de falla entre m\\u00faltiples nodos vinculados\\\") Esta confirmaci\\u00f3n agreg\\u00f3 un nuevo bit en MPOL_MODE_FLAGS, pero solo marc\\u00f3 que era v\\u00e1lido combinaci\\u00f3n (MPOL_F_NUMA_BALANCING solo se puede usar con MPOL_BIND) en do_set_mempolicy() Este parche mueve la verificaci\\u00f3n en sanitize_mpol_flags() para que tambi\\u00e9n sea usado por mbind() [1] ERROR: KMSAN: valor uninit en __mpol_equal+0x567/0x590 mm /mempolicy.c:2260 __mpol_equal+0x567/0x590 mm/mempolicy.c:2260 mpol_equal include/linux/mempolicy.h:105 [en l\\u00ednea] vma_merge+0x4a1/0x1e60 mm/mmap.c:1190 mbind_range+0xcc8/0x1e80 mm/ mempolicy.c:811 do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333 kernel_mbind mm/mempolicy.c:1483 [en l\\u00ednea] __do_sys_mbind mm/mempolicy.c:1490 [en l\\u00ednea] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c: 1486 __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common.c:51 [en l\\u00ednea] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 Entry_SYSCALL_64_after_hwframe+0 Unidad x44/0xae fue creado en: slab_alloc_node mm/slub.c:3221 [en l\\u00ednea] slab_alloc mm/slub.c:3230 [en l\\u00ednea] kmem_cache_alloc+0x751/0xff0 mm/slub.c:3235 mpol_new mm/mempolicy.c:293 [en l\\u00ednea] do_mbind +0x912/0x15f0 mm/mempolicy.c:1289 kernel_mbind mm/mempolicy.c:1483 [en l\\u00ednea] __do_sys_mbind mm/mempolicy.c:1490 [en l\\u00ednea] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486 __x64_sys_mbind+0 x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common.c:51 [en l\\u00ednea] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 Entry_SYSCALL_64_after_hwframe+0x44/0xae ======= =============================================== P\\u00e1nico del kernel - no sincronizaci\\u00f3n: p\\u00e1nico_on_kmsan set... CPU: 0 PID: 15049 Comm: syz-executor.0 Contaminado: GB 5.15.0-rc2-syzkaller #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/ Seguimiento de llamadas de 2011: __dump_stack lib/dump_stack.c:88 [en l\\u00ednea] dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106 dump_stack+0x25/0x28 lib/dump_stack.c:113 p\\u00e1nico+0x44f/0xdeb kernel/panic.c: 232 kmsan_report+0x2ee/0x300 mm/kmsan/report.c:186 __msan_warning+0xd7/0x150 mm/kmsan/instrumentation.c:208 __mpol_equal+0x567/0x590 mm/mempolicy.c:2260 mpol_equal include/linux/mempolicy.h: 105 [en l\\u00ednea] vma_merge+0x4a1/0x1e60 mm/mmap.c:1190 mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811 do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333 kernel_mbind mm/mempolicy.c:1483 [en l\\u00ednea ] __do_sys_mbind mm/mempolicy.c:1490 [en l\\u00ednea] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486 __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common. c:51 [en l\\u00ednea ] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 Entry_SYSCALL_64_after_hwframe+0x44/0xae\"}]",
      "id": "CVE-2021-47462",
      "lastModified": "2024-11-21T06:36:12.487",
      "published": "2024-05-22T07:15:11.117",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-47462\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-22T07:15:11.117\",\"lastModified\":\"2026-06-17T04:17:31.863\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()\\n\\nsyzbot reported access to unitialized memory in mbind() [1]\\n\\nIssue came with commit bda420b98505 (\\\"numa balancing: migrate on fault\\namong multiple bound nodes\\\")\\n\\nThis commit added a new bit in MPOL_MODE_FLAGS, but only checked valid\\ncombination (MPOL_F_NUMA_BALANCING can only be used with MPOL_BIND) in\\ndo_set_mempolicy()\\n\\nThis patch moves the check in sanitize_mpol_flags() so that it is also\\nused by mbind()\\n\\n  [1]\\n  BUG: KMSAN: uninit-value in __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   mpol_equal include/linux/mempolicy.h:105 [inline]\\n   vma_merge+0x4a1/0x1e60 mm/mmap.c:1190\\n   mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811\\n   do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\\n\\n  Uninit was created at:\\n   slab_alloc_node mm/slub.c:3221 [inline]\\n   slab_alloc mm/slub.c:3230 [inline]\\n   kmem_cache_alloc+0x751/0xff0 mm/slub.c:3235\\n   mpol_new mm/mempolicy.c:293 [inline]\\n   do_mbind+0x912/0x15f0 mm/mempolicy.c:1289\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\\n  =====================================================\\n  Kernel panic - not syncing: panic_on_kmsan set ...\\n  CPU: 0 PID: 15049 Comm: syz-executor.0 Tainted: G    B             5.15.0-rc2-syzkaller #0\\n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\\n  Call Trace:\\n   __dump_stack lib/dump_stack.c:88 [inline]\\n   dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106\\n   dump_stack+0x25/0x28 lib/dump_stack.c:113\\n   panic+0x44f/0xdeb kernel/panic.c:232\\n   kmsan_report+0x2ee/0x300 mm/kmsan/report.c:186\\n   __msan_warning+0xd7/0x150 mm/kmsan/instrumentation.c:208\\n   __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   mpol_equal include/linux/mempolicy.h:105 [inline]\\n   vma_merge+0x4a1/0x1e60 mm/mmap.c:1190\\n   mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811\\n   do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: mm/mempolicy: no permitir MPOL_F_NUMA_BALANCING ilegal | MPOL_LOCAL en mbind() syzbot inform\u00f3 acceso a la memoria unificada en mbind() [1] El problema surgi\u00f3 con el commit bda420b98505 (\\\"equilibrio numa: migrar en caso de falla entre m\u00faltiples nodos vinculados\\\") Esta confirmaci\u00f3n agreg\u00f3 un nuevo bit en MPOL_MODE_FLAGS, pero solo marc\u00f3 que era v\u00e1lido combinaci\u00f3n (MPOL_F_NUMA_BALANCING solo se puede usar con MPOL_BIND) en do_set_mempolicy() Este parche mueve la verificaci\u00f3n en sanitize_mpol_flags() para que tambi\u00e9n sea usado por mbind() [1] ERROR: KMSAN: valor uninit en __mpol_equal+0x567/0x590 mm /mempolicy.c:2260 __mpol_equal+0x567/0x590 mm/mempolicy.c:2260 mpol_equal include/linux/mempolicy.h:105 [en l\u00ednea] vma_merge+0x4a1/0x1e60 mm/mmap.c:1190 mbind_range+0xcc8/0x1e80 mm/ mempolicy.c:811 do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333 kernel_mbind mm/mempolicy.c:1483 [en l\u00ednea] __do_sys_mbind mm/mempolicy.c:1490 [en l\u00ednea] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c: 1486 __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common.c:51 [en l\u00ednea] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 Entry_SYSCALL_64_after_hwframe+0 Unidad x44/0xae fue creado en: slab_alloc_node mm/slub.c:3221 [en l\u00ednea] slab_alloc mm/slub.c:3230 [en l\u00ednea] kmem_cache_alloc+0x751/0xff0 mm/slub.c:3235 mpol_new mm/mempolicy.c:293 [en l\u00ednea] do_mbind +0x912/0x15f0 mm/mempolicy.c:1289 kernel_mbind mm/mempolicy.c:1483 [en l\u00ednea] __do_sys_mbind mm/mempolicy.c:1490 [en l\u00ednea] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486 __x64_sys_mbind+0 x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common.c:51 [en l\u00ednea] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 Entry_SYSCALL_64_after_hwframe+0x44/0xae ======= =============================================== P\u00e1nico del kernel - no sincronizaci\u00f3n: p\u00e1nico_on_kmsan set... CPU: 0 PID: 15049 Comm: syz-executor.0 Contaminado: GB 5.15.0-rc2-syzkaller #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/ Seguimiento de llamadas de 2011: __dump_stack lib/dump_stack.c:88 [en l\u00ednea] dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106 dump_stack+0x25/0x28 lib/dump_stack.c:113 p\u00e1nico+0x44f/0xdeb kernel/panic.c: 232 kmsan_report+0x2ee/0x300 mm/kmsan/report.c:186 __msan_warning+0xd7/0x150 mm/kmsan/instrumentation.c:208 __mpol_equal+0x567/0x590 mm/mempolicy.c:2260 mpol_equal include/linux/mempolicy.h: 105 [en l\u00ednea] vma_merge+0x4a1/0x1e60 mm/mmap.c:1190 mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811 do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333 kernel_mbind mm/mempolicy.c:1483 [en l\u00ednea ] __do_sys_mbind mm/mempolicy.c:1490 [en l\u00ednea] __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486 __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486 do_syscall_x64 arch/x86/entry/common. c:51 [en l\u00ednea ] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 Entry_SYSCALL_64_after_hwframe+0x44/0xae\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"mm/mempolicy.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"bda420b985054a3badafef23807c4b4fa38a3dff\",\"lessThan\":\"9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bda420b985054a3badafef23807c4b4fa38a3dff\",\"lessThan\":\"6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"mm/mempolicy.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.12\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.12\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.14.15\",\"lessThanOrEqual\":\"5.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-22T19:48:07.390031Z\",\"id\":\"CVE-2021-47462\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-908\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.12\",\"versionEndExcluding\":\"5.14.15\",\"matchCriteriaId\":\"CFEAA14C-4860-49B1-9532-8AFC5E1BDEF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E46C74C6-B76B-4C94-A6A4-FD2FFF62D644\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"60134C3A-06E4-48C1-B04F-2903732A4E56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"0460DA88-8FE1-46A2-9DDA-1F1ABA552E71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF55383D-4DF2-45DC-93F7-571F4F978EAB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E9481B2-8AA6-4CBD-B5D3-C10F51FF6D01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBD45831-4B79-42BC-ABC0-86870F0DEA89\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:54:08+00:00",
      "cve": "CVE-2021-47462",
      "id": "CVE-2021-47462",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_affected": "90",
      "product_status:known_not_affected": "108",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-47462.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-16T00:28:46Z",
      "cve": "CVE-2021-47462",
      "id": "CVE-2021-47462",
      "initial_release_date": "2024-05-25T03:33:55Z",
      "product_status:known_affected": "275",
      "product_status:known_not_affected": "266",
      "product_status:recommended": "452",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2021-47462",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-47462.json",
      "version": "52"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:39:59.432Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47462\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-22T19:48:07.390031Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-22T19:48:15.511Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"bda420b985054a3badafef23807c4b4fa38a3dff\", \"lessThan\": \"9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bda420b985054a3badafef23807c4b4fa38a3dff\", \"lessThan\": \"6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c\", \"versionType\": \"git\"}], \"programFiles\": [\"mm/mempolicy.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.12\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.12\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.14.15\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.14.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"mm/mempolicy.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9\"}, {\"url\": \"https://git.kernel.org/stable/c/6d2aec9e123bb9c49cb5c7fc654f25f81e688e8c\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()\\n\\nsyzbot reported access to unitialized memory in mbind() [1]\\n\\nIssue came with commit bda420b98505 (\\\"numa balancing: migrate on fault\\namong multiple bound nodes\\\")\\n\\nThis commit added a new bit in MPOL_MODE_FLAGS, but only checked valid\\ncombination (MPOL_F_NUMA_BALANCING can only be used with MPOL_BIND) in\\ndo_set_mempolicy()\\n\\nThis patch moves the check in sanitize_mpol_flags() so that it is also\\nused by mbind()\\n\\n  [1]\\n  BUG: KMSAN: uninit-value in __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   mpol_equal include/linux/mempolicy.h:105 [inline]\\n   vma_merge+0x4a1/0x1e60 mm/mmap.c:1190\\n   mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811\\n   do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\\n\\n  Uninit was created at:\\n   slab_alloc_node mm/slub.c:3221 [inline]\\n   slab_alloc mm/slub.c:3230 [inline]\\n   kmem_cache_alloc+0x751/0xff0 mm/slub.c:3235\\n   mpol_new mm/mempolicy.c:293 [inline]\\n   do_mbind+0x912/0x15f0 mm/mempolicy.c:1289\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\\n  =====================================================\\n  Kernel panic - not syncing: panic_on_kmsan set ...\\n  CPU: 0 PID: 15049 Comm: syz-executor.0 Tainted: G    B             5.15.0-rc2-syzkaller #0\\n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\\n  Call Trace:\\n   __dump_stack lib/dump_stack.c:88 [inline]\\n   dump_stack_lvl+0x1ff/0x28e lib/dump_stack.c:106\\n   dump_stack+0x25/0x28 lib/dump_stack.c:113\\n   panic+0x44f/0xdeb kernel/panic.c:232\\n   kmsan_report+0x2ee/0x300 mm/kmsan/report.c:186\\n   __msan_warning+0xd7/0x150 mm/kmsan/instrumentation.c:208\\n   __mpol_equal+0x567/0x590 mm/mempolicy.c:2260\\n   mpol_equal include/linux/mempolicy.h:105 [inline]\\n   vma_merge+0x4a1/0x1e60 mm/mmap.c:1190\\n   mbind_range+0xcc8/0x1e80 mm/mempolicy.c:811\\n   do_mbind+0xf42/0x15f0 mm/mempolicy.c:1333\\n   kernel_mbind mm/mempolicy.c:1483 [inline]\\n   __do_sys_mbind mm/mempolicy.c:1490 [inline]\\n   __se_sys_mbind+0x437/0xb80 mm/mempolicy.c:1486\\n   __x64_sys_mbind+0x19d/0x200 mm/mempolicy.c:1486\\n   do_syscall_x64 arch/x86/entry/common.c:51 [inline]\\n   do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.14.15\", \"versionStartIncluding\": \"5.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15\", \"versionStartIncluding\": \"5.12\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T07:11:26.025Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47462\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-04T07:11:26.025Z\", \"dateReserved\": \"2024-05-22T06:20:56.198Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-22T06:23:23.034Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.