
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2021-47492 affects the Linux kernel's memory management subsystem, specifically in the collapse_file functionality for Transparent Huge Pages (THP). The vulnerability was discovered in late 2021 and involves improper handling of writeback pages in the collapse_file function (Kernel Git).
The vulnerability occurs because collapse_file does not explicitly check PG_writeback, instead relying on page_has_private and try_to_release_page to filter writeback pages. This approach fails specifically with XFS filesystem when the blocksize is equal to or larger than the pagesize, as XFS has no page->private in such cases. This can lead to a kernel panic when xfs end_page_writeback is called (Kernel Git).
When exploited, this vulnerability can cause a kernel panic in systems using XFS filesystem with specific configurations, leading to system crashes and potential denial of service. The issue specifically affects the memory management subsystem's handling of Transparent Huge Pages (Red Hat).
The issue has been patched in various Linux kernel versions. The fix involves adding explicit checks for PageWriteback before proceeding with the collapse_file operation. Red Hat has released security updates for affected versions of Red Hat Enterprise Linux (Red Hat).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."