Wiz Agents & Workflows are here

CVE-2021-47492
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2021-47492 affects the Linux kernel's memory management subsystem, specifically in the collapse_file functionality for Transparent Huge Pages (THP). The vulnerability was discovered in late 2021 and involves improper handling of writeback pages in the collapse_file function (Kernel Git).

Technical details

The vulnerability occurs because collapse_file does not explicitly check PG_writeback, instead relying on page_has_private and try_to_release_page to filter writeback pages. This approach fails specifically with XFS filesystem when the blocksize is equal to or larger than the pagesize, as XFS has no page->private in such cases. This can lead to a kernel panic when xfs end_page_writeback is called (Kernel Git).

Impact

When exploited, this vulnerability can cause a kernel panic in systems using XFS filesystem with specific configurations, leading to system crashes and potential denial of service. The issue specifically affects the memory management subsystem's handling of Transparent Huge Pages (Red Hat).

Mitigation and workarounds

The issue has been patched in various Linux kernel versions. The fix involves adding explicit checks for PageWriteback before proceeding with the collapse_file operation. Red Hat has released security updates for affected versions of Red Hat Enterprise Linux (Red Hat).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-23395CRITICAL9.1
  • Linux KernelLinux Kernel
  • kernel-zfcpdump-devel-matched
NoYesMar 25, 2026
CVE-2026-23399MEDIUM6.5
  • Linux KernelLinux Kernel
  • kernel-rt-debug-modules-extra
NoYesMar 28, 2026
CVE-2026-23398MEDIUM6.5
  • Linux KernelLinux Kernel
  • kernel-64k-debug
NoYesMar 26, 2026
CVE-2026-23397MEDIUM4.4
  • Linux KernelLinux Kernel
  • kernel-rt-64k-modules-core
NoYesMar 26, 2026
CVE-2026-31788N/AN/A
  • Linux KernelLinux Kernel
  • linux-azure-fde
NoYesMar 25, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management