CVE-2021-47462

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc2-syzkaller #0

Description A vulnerability in the Linux kernel has been resolved, which was caused by the commit bda420b98505 that added a new bit in MPOL MODE FLAGS but only checked valid combinations in do set mempolicy(). The patch moves the check in sanitize mpol flags() to also be used by mbind(). Syzbot reported access to uninitialized memory in mbind(). The issue can lead to a kernel panic.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the patch that moves the check in sanitize mpol flags() to also be used by mbind(). At the moment, there is no information about a newer version that contains a fix for this vulnerability.