CVE-2021-47374
kernel: dma-debug: prevent an error message from causing runtime problems
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 21, 2024
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's DMA (Direct Memory Access) debug subsystem. When certain drivers encounter an error condition, the kernel generates diagnostic error messages without rate limiting. A local user triggering this condition can flood the system log buffer and saturate processor capacity, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated as having a Low severity impact because exploiting it requires triggering driver-specific error conditions that typically necessitate privileged local access or specialized hardware interactions. Under standard Red Hat Enterprise Linux deployments, DMA debugging facilities are intended for diagnostic environments rather than standard production operations. Consequently, the risk of an unprivileged attacker reliably saturating the kernel logging buffer or causing a significant denial of service is minimal.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-779 · Logging of Excessive Data