CVE Database›Document archive›CVE-2021-46919

CVE-2021-46919

kernel: wq size store permission state

Loading…

Severity

Low

Red Hat Product Security

2.3

CVSS 3.1

Review impact separately from score.

Published · February 27, 2024

Updated · September 25, 2026

Description

A flaw was found in the Linux Kernel. The WQ size can only be changed when the device is disabled. The current code allows change when the device is enabled but WQ is disabled. Change the check to detect the device state.

Statement

This flaw in the Linux kernel idxd driver presents minimal security risk because altering workqueue configuration via sysfs requires administrative privileges (such as CAP_SYS_ADMIN or root). The issue allows modifying workqueue sizes while the underlying device is still enabled, potentially leading to inconsistent device states. Because unprivileged local users and remote actors cannot write to these sysfs parameters, this flaw cannot be leveraged for privilege escalation or unauthorized system access.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 2.3
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

CWE-20 · Improper Input Validation