CVE Database›Document archive›CVE-2021-47374

CVE-2021-47374

kernel: dma-debug: prevent an error message from causing runtime problems

Loading…

Severity

Low

Red Hat Product Security

4.4

CVSS 3.1

Review impact separately from score.

Published · May 21, 2024

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's DMA (Direct Memory Access) debug subsystem. When certain drivers encounter an error condition, the kernel generates diagnostic error messages without rate limiting. A local user triggering this condition can flood the system log buffer and saturate processor capacity, resulting in a Denial of Service (DoS).

Statement

This vulnerability is rated as having a Low severity impact because exploiting it requires triggering driver-specific error conditions that typically necessitate privileged local access or specialized hardware interactions. Under standard Red Hat Enterprise Linux deployments, DMA debugging facilities are intended for diagnostic environments rather than standard production operations. Consequently, the risk of an unprivileged attacker reliably saturating the kernel logging buffer or causing a significant denial of service is minimal.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-779 · Logging of Excessive Data