CVE-2021-47461: Linux Kernel

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a race between writeprotect and exit_mmap() A race is possible when a process exits, its VMAs are removed by exit_mmap() and at the same time userfaultfd_writeprotect() is called. The race was detected by KASAN on a development kernel, but it appears to be possible on vanilla kernels as well. Use mmget_not_zero() to prevent the race as done in other userfaultfd operations.

Affected products

• Linux Linux Kernel: from 5.7, before 5.10.76 (fixed in 5.10.76); from 5.11, before 5.14.15 (fixed in 5.14.15); version 5.15 only

Published 2024-05-22. Last modified 2026-08-04.