CVE-2021-47419

A flaw was found in the Linux kernel's Time-Aware Priority (TAPRIO) network scheduling module. This vulnerability allows a local attacker with network configuration privileges to cause a Denial of Service (DoS) by crashing the system. When a TAPRIO queuing discipline is dismantled, the kernel fails to properly cancel an active timer, leading to memory corruption when the active object is freed.

This vulnerability is evaluated with a Low severity impact because triggering it requires local administrative privileges, specifically CAP_NET_ADMIN, to manipulate traffic control queueing disciplines. The Time-Aware Priority scheduler is not utilized by default and is typically deployed only in specialized Time-Sensitive Networking environments. As a result, successful exploitation is restricted to privileged local users and results solely in a denial of service through a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.