CVE-2021-46971

Summary

CVE-2021-46971 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the perf/core component, where the security_locked_down() call is made unconditionally. Though this does not cause harm in the Lockdown LSM, it creates complications with SELinux's lockdown hook implementation. SELinux utilizes the hook to check whether the current task's type has the "lockdown" class permission granted in the policy. Calling the hook when the access control decision would be disregarded results in a false permission check and generates unnecessary audit records. To rectify the issue, the kernel now checks the sample_type before invoking the lockdown hook, ensuring that the hook is only executed when its result would be honored.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.