CVE-2021-47435
kernel: dm: fix mempool NULL pointer race when completing IO
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 22, 2024
Updated · October 14, 2026
Description
A flaw was found in the Linux kernel's Device Mapper (DM) subsystem. This flaw allows a local user to cause a denial of service (DoS) by triggering a system crash. The issue occurs due to a race condition when an input/output (I/O) request completes concurrently with a table swap operation, resulting in memory pool resources being freed prematurely and causing a null pointer dereference.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference