CVE-2021-46919
kernel: wq size store permission state
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 27, 2024
Updated · September 25, 2026
Description
A flaw was found in the Linux Kernel. The WQ size can only be changed when the device is disabled. The current code allows change when the device is enabled but WQ is disabled. Change the check to detect the device state.
Statement
This flaw in the Linux kernel idxd driver presents minimal security risk because altering workqueue configuration via sysfs requires administrative privileges (such as CAP_SYS_ADMIN or root). The issue allows modifying workqueue sizes while the underlying device is still enabled, potentially leading to inconsistent device states. Because unprivileged local users and remote actors cannot write to these sysfs parameters, this flaw cannot be leveraged for privilege escalation or unauthorized system access.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 2.3CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CWE-20 · Improper Input Validation