CVE-2021-46970

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 27, 2024
Updated: Jan 8, 2025

Summary

CVE-2021-46970: A vulnerability in the Linux kernel's MHI driver has been addressed. The issue arose from the addition of WQ_HIGHPRI and WQ_MEM_RECLAIM flags to a dedicated workqueue for state-change work. However, this work does not guarantee progress under memory pressure and even waits on memory allocations. The presence of WQ_MEM_RECLAIM caused a warning in check_flush_dependency() since it flushed non-reclaim workqueue events. This vulnerability could lead to unnecessary warnings and potential performance issues.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share