CVE-2021-47536

A flaw was found in the Linux kernel's Shared Memory Communications (SMC) subsystem. During early link group cleanup, the kernel mistakenly removes the list head rather than the specific link group entry from the tracking list. A local user could exploit this behavior to cause memory corruption and trigger a kernel crash, resulting in a denial of service (DoS).

This vulnerability is rated as Low severity because exploiting it requires local system access, and Shared Memory Communications (SMC) protocol usage is uncommon in typical default environments, primarily targeting systems equipped with specialized RDMA or ISM hardware. Triggering the flaw requires specific failure conditions during link group teardown, which restricts the attack surface. Consequently, the realistic blast radius is limited to a local denial of service through a kernel crash without enabling arbitrary privilege escalation or unauthorized data disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.