{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "Use get_user_pages_unlocked() call to handle mmap assert", "tracking": { "current_release_date": "2026-07-29T04:54:45+00:00", "generator": { "date": "2026-07-29T04:54:45+00:00", "engine": { "name": "CSAF Generator", "version": "3.1.0" } }, "id": "CVE-2021-46927", "initial_release_date": "2024-02-27T00:00:00+00:00", "revision_history": [ { "date": "2026-07-29T04:54:45+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.9", "product": { "name": "Red Hat Enterprise Linux 9.9", "product_id": "rhel-9", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_version", "name": "bpftool", "product": { "name": "bpftool", "product_id": "bpftool", "product_identification_helper": { "purl": "pkg:rpm/redhat/bpftool" } } }, { "category": "product_version", "name": "bpftool-debuginfo", "product": { "name": "bpftool-debuginfo", "product_id": "bpftool-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/bpftool-debuginfo" } } }, { "category": "product_version", "name": "kernel", "product": { "name": "kernel", "product_id": "kernel", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel" } } }, { "category": "product_version", "name": "kernel-abi-whitelists", "product": { "name": "kernel-abi-whitelists", "product_id": "kernel-abi-whitelists", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-abi-whitelists" } } }, { "category": "product_version", "name": "kernel-bootwrapper", "product": { "name": "kernel-bootwrapper", "product_id": "kernel-bootwrapper", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-bootwrapper" } } }, { "category": "product_version", "name": "kernel-debug", "product": { "name": "kernel-debug", "product_id": "kernel-debug", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debug" } } }, { "category": "product_version", "name": "kernel-debug-debuginfo", "product": { "name": "kernel-debug-debuginfo", "product_id": "kernel-debug-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debug-debuginfo" } } }, { "category": "product_version", "name": "kernel-debug-devel", "product": { "name": "kernel-debug-devel", "product_id": "kernel-debug-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debug-devel" } } }, { "category": "product_version", "name": "kernel-debuginfo", "product": { "name": "kernel-debuginfo", "product_id": "kernel-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debuginfo" } } }, { "category": "product_version", "name": "kernel-debuginfo-common-i686", "product": { "name": "kernel-debuginfo-common-i686", "product_id": "kernel-debuginfo-common-i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debuginfo-common-i686" } } }, { "category": "product_version", "name": "kernel-debuginfo-common-ppc64", "product": { "name": "kernel-debuginfo-common-ppc64", "product_id": "kernel-debuginfo-common-ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debuginfo-common-ppc64" } } }, { "category": "product_version", "name": "kernel-debuginfo-common-ppc64le", "product": { "name": "kernel-debuginfo-common-ppc64le", "product_id": "kernel-debuginfo-common-ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debuginfo-common-ppc64le" } } }, { "category": "product_version", "name": "kernel-debuginfo-common-s390x", "product": { "name": "kernel-debuginfo-common-s390x", "product_id": "kernel-debuginfo-common-s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debuginfo-common-s390x" } } }, { "category": "product_version", "name": "kernel-debuginfo-common-x86_64", "product": { "name": "kernel-debuginfo-common-x86_64", "product_id": "kernel-debuginfo-common-x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64" } } }, { "category": "product_version", "name": "kernel-devel", "product": { "name": "kernel-devel", "product_id": "kernel-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-devel" } } }, { "category": "product_version", "name": "kernel-doc", "product": { "name": "kernel-doc", "product_id": "kernel-doc", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-doc" } } }, { "category": "product_version", "name": "kernel-firmware", "product": { "name": "kernel-firmware", "product_id": "kernel-firmware", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-firmware" } } }, { "category": "product_version", "name": "kernel-headers", "product": { "name": "kernel-headers", "product_id": "kernel-headers", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-headers" } } }, { "category": "product_version", "name": "kernel-kdump", "product": { "name": "kernel-kdump", "product_id": "kernel-kdump", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-kdump" } } }, { "category": "product_version", "name": "kernel-kdump-debuginfo", "product": { "name": "kernel-kdump-debuginfo", "product_id": "kernel-kdump-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-kdump-debuginfo" } } }, { "category": "product_version", "name": "kernel-kdump-devel", "product": { "name": "kernel-kdump-devel", "product_id": "kernel-kdump-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-kdump-devel" } } }, { "category": "product_version", "name": "kernel-rt", "product": { "name": "kernel-rt", "product_id": "kernel-rt", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt" } } }, { "category": "product_version", "name": "kernel-rt-core", "product": { "name": "kernel-rt-core", "product_id": "kernel-rt-core", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-core" } } }, { "category": "product_version", "name": "kernel-rt-debug", "product": { "name": "kernel-rt-debug", "product_id": "kernel-rt-debug", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug" } } }, { "category": "product_version", "name": "kernel-rt-debug-core", "product": { "name": "kernel-rt-debug-core", "product_id": "kernel-rt-debug-core", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-core" } } }, { "category": "product_version", "name": "kernel-rt-debug-debuginfo", "product": { "name": "kernel-rt-debug-debuginfo", "product_id": "kernel-rt-debug-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo" } } }, { "category": "product_version", "name": "kernel-rt-debug-devel", "product": { "name": "kernel-rt-debug-devel", "product_id": "kernel-rt-debug-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-devel" } } }, { "category": "product_version", "name": "kernel-rt-debug-kvm", "product": { "name": "kernel-rt-debug-kvm", "product_id": "kernel-rt-debug-kvm", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm" } } }, { "category": "product_version", "name": "kernel-rt-debug-kvm-debuginfo", "product": { "name": "kernel-rt-debug-kvm-debuginfo", "product_id": "kernel-rt-debug-kvm-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-kvm-debuginfo" } } }, { "category": "product_version", "name": "kernel-rt-debug-modules", "product": { "name": "kernel-rt-debug-modules", "product_id": "kernel-rt-debug-modules", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-modules" } } }, { "category": "product_version", "name": "kernel-rt-debug-modules-core", "product": { "name": "kernel-rt-debug-modules-core", "product_id": "kernel-rt-debug-modules-core", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-modules-core" } } }, { "category": "product_version", "name": "kernel-rt-debug-modules-extra", "product": { "name": "kernel-rt-debug-modules-extra", "product_id": "kernel-rt-debug-modules-extra", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debug-modules-extra" } } }, { "category": "product_version", "name": "kernel-rt-debuginfo", "product": { "name": "kernel-rt-debuginfo", "product_id": "kernel-rt-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debuginfo" } } }, { "category": "product_version", "name": "kernel-rt-debuginfo-common-x86_64", "product": { "name": "kernel-rt-debuginfo-common-x86_64", "product_id": "kernel-rt-debuginfo-common-x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64" } } }, { "category": "product_version", "name": "kernel-rt-devel", "product": { "name": "kernel-rt-devel", "product_id": "kernel-rt-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-devel" } } }, { "category": "product_version", "name": "kernel-rt-doc", "product": { "name": "kernel-rt-doc", "product_id": "kernel-rt-doc", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-doc" } } }, { "category": "product_version", "name": "kernel-rt-kvm", "product": { "name": "kernel-rt-kvm", "product_id": "kernel-rt-kvm", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-kvm" } } }, { "category": "product_version", "name": "kernel-rt-kvm-debuginfo", "product": { "name": "kernel-rt-kvm-debuginfo", "product_id": "kernel-rt-kvm-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-kvm-debuginfo" } } }, { "category": "product_version", "name": "kernel-rt-modules", "product": { "name": "kernel-rt-modules", "product_id": "kernel-rt-modules", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-modules" } } }, { "category": "product_version", "name": "kernel-rt-modules-core", "product": { "name": "kernel-rt-modules-core", "product_id": "kernel-rt-modules-core", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-modules-core" } } }, { "category": "product_version", "name": "kernel-rt-modules-extra", "product": { "name": "kernel-rt-modules-extra", "product_id": "kernel-rt-modules-extra", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-modules-extra" } } }, { "category": "product_version", "name": "kernel-rt-trace", "product": { "name": "kernel-rt-trace", "product_id": "kernel-rt-trace", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-trace" } } }, { "category": "product_version", "name": "kernel-rt-trace-debuginfo", "product": { "name": "kernel-rt-trace-debuginfo", "product_id": "kernel-rt-trace-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo" } } }, { "category": "product_version", "name": "kernel-rt-trace-devel", "product": { "name": "kernel-rt-trace-devel", "product_id": "kernel-rt-trace-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-trace-devel" } } }, { "category": "product_version", "name": "kernel-rt-trace-kvm", "product": { "name": "kernel-rt-trace-kvm", "product_id": "kernel-rt-trace-kvm", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-trace-kvm" } } }, { "category": "product_version", "name": "kernel-rt-trace-kvm-debuginfo", "product": { "name": "kernel-rt-trace-kvm-debuginfo", "product_id": "kernel-rt-trace-kvm-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt-trace-kvm-debuginfo" } } }, { "category": "product_version", "name": "kernel-rt", "product": { "name": "kernel-rt", "product_id": "kernel-rt.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-rt?arch=src" } } }, { "category": "product_version", "name": "kernel-tools", "product": { "name": "kernel-tools", "product_id": "kernel-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-tools" } } }, { "category": "product_version", "name": "kernel-tools-debuginfo", "product": { "name": "kernel-tools-debuginfo", "product_id": "kernel-tools-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-tools-debuginfo" } } }, { "category": "product_version", "name": "kernel-tools-libs", "product": { "name": "kernel-tools-libs", "product_id": "kernel-tools-libs", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-tools-libs" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel", "product": { "name": "kernel-tools-libs-devel", "product_id": "kernel-tools-libs-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel-tools-libs-devel" } } }, { "category": "product_version", "name": "kernel", "product": { "name": "kernel", "product_id": "kernel.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/kernel?arch=src" } } }, { "category": "product_version", "name": "perf", "product": { "name": "perf", "product_id": "perf", "product_identification_helper": { "purl": "pkg:rpm/redhat/perf" } } }, { "category": "product_version", "name": "perf-debuginfo", "product": { "name": "perf-debuginfo", "product_id": "perf-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/perf-debuginfo" } } }, { "category": "product_version", "name": "python-perf", "product": { "name": "python-perf", "product_id": "python-perf", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-perf" } } }, { "category": "product_version", "name": "python-perf-debuginfo", "product": { "name": "python-perf-debuginfo", "product_id": "python-perf-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-perf-debuginfo" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "bpftool as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:bpftool" }, "product_reference": "bpftool", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:bpftool-debuginfo" }, "product_reference": "bpftool-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel" }, "product_reference": "kernel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel" }, "product_reference": "kernel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-whitelists as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-abi-whitelists" }, "product_reference": "kernel-abi-whitelists", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-whitelists as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-abi-whitelists" }, "product_reference": "kernel-abi-whitelists", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-bootwrapper as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-bootwrapper" }, "product_reference": "kernel-bootwrapper", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-debug" }, "product_reference": "kernel-debug", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-debug" }, "product_reference": "kernel-debug", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-debug-debuginfo" }, "product_reference": "kernel-debug-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-debug-debuginfo" }, "product_reference": "kernel-debug-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-debug-devel" }, "product_reference": "kernel-debug-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-debug-devel" }, "product_reference": "kernel-debug-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-debuginfo" }, "product_reference": "kernel-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-debuginfo" }, "product_reference": "kernel-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo-common-i686 as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-debuginfo-common-i686" }, "product_reference": "kernel-debuginfo-common-i686", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo-common-ppc64 as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-debuginfo-common-ppc64" }, "product_reference": "kernel-debuginfo-common-ppc64", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo-common-ppc64le as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-debuginfo-common-ppc64le" }, "product_reference": "kernel-debuginfo-common-ppc64le", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo-common-s390x as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-debuginfo-common-s390x" }, "product_reference": "kernel-debuginfo-common-s390x", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo-common-s390x as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-debuginfo-common-s390x" }, "product_reference": "kernel-debuginfo-common-s390x", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo-common-x86_64 as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-debuginfo-common-x86_64" }, "product_reference": "kernel-debuginfo-common-x86_64", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debuginfo-common-x86_64 as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-debuginfo-common-x86_64" }, "product_reference": "kernel-debuginfo-common-x86_64", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-devel" }, "product_reference": "kernel-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-devel" }, "product_reference": "kernel-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-doc" }, "product_reference": "kernel-doc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-doc" }, "product_reference": "kernel-doc", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-firmware as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-firmware" }, "product_reference": "kernel-firmware", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-headers" }, "product_reference": "kernel-headers", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-headers" }, "product_reference": "kernel-headers", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-kdump as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-kdump" }, "product_reference": "kernel-kdump", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-kdump as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-kdump" }, "product_reference": "kernel-kdump", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-kdump-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-kdump-debuginfo" }, "product_reference": "kernel-kdump-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-kdump-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-kdump-debuginfo" }, "product_reference": "kernel-kdump-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-kdump-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel-kdump-devel" }, "product_reference": "kernel-kdump-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-kdump-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-kdump-devel" }, "product_reference": "kernel-kdump-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt" }, "product_reference": "kernel-rt", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt" }, "product_reference": "kernel-rt", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt" }, "product_reference": "kernel-rt", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-core as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-core" }, "product_reference": "kernel-rt-core", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-core as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-core" }, "product_reference": "kernel-rt-core", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-debug" }, "product_reference": "kernel-rt-debug", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-debug" }, "product_reference": "kernel-rt-debug", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-debug" }, "product_reference": "kernel-rt-debug", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-core as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-debug-core" }, "product_reference": "kernel-rt-debug-core", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-core as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-debug-core" }, "product_reference": "kernel-rt-debug-core", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-debug-debuginfo" }, "product_reference": "kernel-rt-debug-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-debug-devel" }, "product_reference": "kernel-rt-debug-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-debug-devel" }, "product_reference": "kernel-rt-debug-devel", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-debug-devel" }, "product_reference": "kernel-rt-debug-devel", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-debug-kvm" }, "product_reference": "kernel-rt-debug-kvm", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-debug-kvm" }, "product_reference": "kernel-rt-debug-kvm", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-debug-kvm" }, "product_reference": "kernel-rt-debug-kvm", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-kvm-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-debug-kvm-debuginfo" }, "product_reference": "kernel-rt-debug-kvm-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-debug-modules" }, "product_reference": "kernel-rt-debug-modules", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-debug-modules" }, "product_reference": "kernel-rt-debug-modules", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-core as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-debug-modules-core" }, "product_reference": "kernel-rt-debug-modules-core", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-debug-modules-extra" }, "product_reference": "kernel-rt-debug-modules-extra", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-debug-modules-extra" }, "product_reference": "kernel-rt-debug-modules-extra", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-debuginfo" }, "product_reference": "kernel-rt-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debuginfo-common-x86_64 as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-debuginfo-common-x86_64" }, "product_reference": "kernel-rt-debuginfo-common-x86_64", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-devel as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-devel" }, "product_reference": "kernel-rt-devel", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-devel" }, "product_reference": "kernel-rt-devel", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-devel" }, "product_reference": "kernel-rt-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-doc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-doc" }, "product_reference": "kernel-rt-doc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-kvm as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-kvm" }, "product_reference": "kernel-rt-kvm", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-kvm as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-kvm" }, "product_reference": "kernel-rt-kvm", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-kvm as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-kvm" }, "product_reference": "kernel-rt-kvm", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-kvm-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-kvm-debuginfo" }, "product_reference": "kernel-rt-kvm-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-modules" }, "product_reference": "kernel-rt-modules", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-modules" }, "product_reference": "kernel-rt-modules", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-core as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-modules-core" }, "product_reference": "kernel-rt-modules-core", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-extra as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt-modules-extra" }, "product_reference": "kernel-rt-modules-extra", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-extra as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt-modules-extra" }, "product_reference": "kernel-rt-modules-extra", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-trace as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-trace" }, "product_reference": "kernel-rt-trace", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-trace-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-trace-debuginfo" }, "product_reference": "kernel-rt-trace-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-trace-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-trace-devel" }, "product_reference": "kernel-rt-trace-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-trace-kvm as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-trace-kvm" }, "product_reference": "kernel-rt-trace-kvm", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-trace-kvm-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt-trace-kvm-debuginfo" }, "product_reference": "kernel-rt-trace-kvm-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt.src as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:kernel-rt.src" }, "product_reference": "kernel-rt.src", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-rt.src" }, "product_reference": "kernel-rt.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-rt.src" }, "product_reference": "kernel-rt.src", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-tools" }, "product_reference": "kernel-tools", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-tools-debuginfo" }, "product_reference": "kernel-tools-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-tools-libs" }, "product_reference": "kernel-tools-libs", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel-tools-libs-devel" }, "product_reference": "kernel-tools-libs-devel", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel-tools-libs-devel" }, "product_reference": "kernel-tools-libs-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:kernel.src" }, "product_reference": "kernel.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:kernel.src" }, "product_reference": "kernel.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "kernel.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:kernel.src" }, "product_reference": "kernel.src", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "perf as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:perf" }, "product_reference": "perf", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "perf as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:perf" }, "product_reference": "perf", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "perf-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:perf-debuginfo" }, "product_reference": "perf-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "perf-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:perf-debuginfo" }, "product_reference": "perf-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:python-perf" }, "product_reference": "python-perf", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:python-perf" }, "product_reference": "python-perf", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:python-perf-debuginfo" }, "product_reference": "python-perf-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:python-perf-debuginfo" }, "product_reference": "python-perf-debuginfo", "relates_to_product_reference": "rhel-7-els.els" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-46927", "cwe": { "id": "CWE-413", "name": "Improper Resource Locking" }, "discovery_date": "2024-02-27T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-6-els.els:kernel-debug-debuginfo", "rhel-6-els.els:kernel-debug-devel", "rhel-6-els.els:kernel-debuginfo", "rhel-6-els.els:kernel-devel", "rhel-6-els.els:kernel-doc", "rhel-6-els.els:kernel-headers", "rhel-6-els.els:kernel-kdump-debuginfo", "rhel-6-els.els:kernel-kdump-devel", "rhel-6-els.els:perf-debuginfo", "rhel-6-els.els:python-perf-debuginfo", "rhel-7-els.els:bpftool-debuginfo", "rhel-7-els.els:kernel-debug-debuginfo", "rhel-7-els.els:kernel-debug-devel", "rhel-7-els.els:kernel-debuginfo", "rhel-7-els.els:kernel-devel", "rhel-7-els.els:kernel-doc", "rhel-7-els.els:kernel-headers", "rhel-7-els.els:kernel-kdump-debuginfo", "rhel-7-els.els:kernel-kdump-devel", "rhel-7-els.els:kernel-rt-debug-debuginfo", "rhel-7-els.els:kernel-rt-debug-devel", "rhel-7-els.els:kernel-rt-debug-kvm-debuginfo", "rhel-7-els.els:kernel-rt-debuginfo", "rhel-7-els.els:kernel-rt-devel", "rhel-7-els.els:kernel-rt-doc", "rhel-7-els.els:kernel-rt-kvm-debuginfo", "rhel-7-els.els:kernel-rt-trace-debuginfo", "rhel-7-els.els:kernel-rt-trace-devel", "rhel-7-els.els:kernel-rt-trace-kvm-debuginfo", "rhel-7-els.els:kernel-tools-debuginfo", "rhel-7-els.els:kernel-tools-libs-devel", "rhel-7-els.els:perf-debuginfo", "rhel-7-els.els:python-perf-debuginfo", "rhel-8:kernel-rt-debug-devel", "rhel-8:kernel-rt-devel", "rhel-8:kernel-tools-libs-devel", "rhel-9:kernel-rt-debug-devel", "rhel-9:kernel-rt-devel" ] } ], "notes": [ { "category": "other", "text": "Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability.", "title": "Statement" }, { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert\n\nAfter commit 5b78ed24e8ec (\"mm/pagemap: add mmap_assert_locked()\nannotations to find_vma*()\"), the call to get_user_pages() will trigger\nthe mmap assert.\n\nstatic inline void mmap_assert_locked(struct mm_struct *mm)\n{\n\tlockdep_assert_held(&mm->mmap_lock);\n\tVM_BUG_ON_MM(!rwsem_is_locked(&mm->mmap_lock), mm);\n}\n\n[ 62.521410] kernel BUG at include/linux/mmap_lock.h:156!\n...........................................................\n[ 62.538938] RIP: 0010:find_vma+0x32/0x80\n...........................................................\n[ 62.605889] Call Trace:\n[ 62.608502] \n[ 62.610956] ? lock_timer_base+0x61/0x80\n[ 62.614106] find_extend_vma+0x19/0x80\n[ 62.617195] __get_user_pages+0x9b/0x6a0\n[ 62.620356] __gup_longterm_locked+0x42d/0x450\n[ 62.623721] ? finish_wait+0x41/0x80\n[ 62.626748] ? __kmalloc+0x178/0x2f0\n[ 62.629768] ne_set_user_memory_region_ioctl.isra.0+0x225/0x6a0 [nitro_enclaves]\n[ 62.635776] ne_enclave_ioctl+0x1cf/0x6d7 [nitro_enclaves]\n[ 62.639541] __x64_sys_ioctl+0x82/0xb0\n[ 62.642620] do_syscall_64+0x3b/0x90\n[ 62.645642] entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nUse get_user_pages_unlocked() when setting the enclave memory regions.\nThat's a similar pattern as mmap_read_lock() used together with\nget_user_pages().", "title": "Vulnerability description" } ], "product_status": { "known_affected": [ "rhel-6-els.els:kernel", "rhel-6-els.els:kernel-abi-whitelists", "rhel-6-els.els:kernel-debug", "rhel-6-els.els:kernel-debuginfo-common-i686", "rhel-6-els.els:kernel-debuginfo-common-s390x", "rhel-6-els.els:kernel-debuginfo-common-x86_64", "rhel-6-els.els:kernel-firmware", "rhel-6-els.els:kernel-kdump", "rhel-6-els.els:kernel.src", "rhel-6-els.els:perf", "rhel-6-els.els:python-perf", "rhel-7-els.els:bpftool", "rhel-7-els.els:kernel", "rhel-7-els.els:kernel-abi-whitelists", "rhel-7-els.els:kernel-bootwrapper", "rhel-7-els.els:kernel-debug", "rhel-7-els.els:kernel-debuginfo-common-ppc64", "rhel-7-els.els:kernel-debuginfo-common-ppc64le", "rhel-7-els.els:kernel-debuginfo-common-s390x", "rhel-7-els.els:kernel-debuginfo-common-x86_64", "rhel-7-els.els:kernel-kdump", "rhel-7-els.els:kernel-rt", "rhel-7-els.els:kernel-rt-debug", "rhel-7-els.els:kernel-rt-debug-kvm", "rhel-7-els.els:kernel-rt-debuginfo-common-x86_64", "rhel-7-els.els:kernel-rt-kvm", "rhel-7-els.els:kernel-rt-trace", "rhel-7-els.els:kernel-rt-trace-kvm", "rhel-7-els.els:kernel-rt.src", "rhel-7-els.els:kernel-tools", "rhel-7-els.els:kernel-tools-libs", "rhel-7-els.els:kernel.src", "rhel-7-els.els:perf", "rhel-7-els.els:python-perf", "rhel-8:kernel-rt", "rhel-8:kernel-rt-core", "rhel-8:kernel-rt-debug", "rhel-8:kernel-rt-debug-core", "rhel-8:kernel-rt-debug-kvm", "rhel-8:kernel-rt-debug-modules", "rhel-8:kernel-rt-debug-modules-extra", "rhel-8:kernel-rt-kvm", "rhel-8:kernel-rt-modules", "rhel-8:kernel-rt-modules-extra", "rhel-8:kernel-rt.src", "rhel-8:kernel.src", "rhel-9:kernel-rt", "rhel-9:kernel-rt-core", "rhel-9:kernel-rt-debug", "rhel-9:kernel-rt-debug-core", "rhel-9:kernel-rt-debug-kvm", "rhel-9:kernel-rt-debug-modules", "rhel-9:kernel-rt-debug-modules-core", "rhel-9:kernel-rt-debug-modules-extra", "rhel-9:kernel-rt-kvm", "rhel-9:kernel-rt-modules", "rhel-9:kernel-rt-modules-core", "rhel-9:kernel-rt-modules-extra", "rhel-9:kernel-rt.src" ], "known_not_affected": [ "rhel-6-els.els:kernel-debug-debuginfo", "rhel-6-els.els:kernel-debug-devel", "rhel-6-els.els:kernel-debuginfo", "rhel-6-els.els:kernel-devel", "rhel-6-els.els:kernel-doc", "rhel-6-els.els:kernel-headers", "rhel-6-els.els:kernel-kdump-debuginfo", "rhel-6-els.els:kernel-kdump-devel", "rhel-6-els.els:perf-debuginfo", "rhel-6-els.els:python-perf-debuginfo", "rhel-7-els.els:bpftool-debuginfo", "rhel-7-els.els:kernel-debug-debuginfo", "rhel-7-els.els:kernel-debug-devel", "rhel-7-els.els:kernel-debuginfo", "rhel-7-els.els:kernel-devel", "rhel-7-els.els:kernel-doc", "rhel-7-els.els:kernel-headers", "rhel-7-els.els:kernel-kdump-debuginfo", "rhel-7-els.els:kernel-kdump-devel", "rhel-7-els.els:kernel-rt-debug-debuginfo", "rhel-7-els.els:kernel-rt-debug-devel", "rhel-7-els.els:kernel-rt-debug-kvm-debuginfo", "rhel-7-els.els:kernel-rt-debuginfo", "rhel-7-els.els:kernel-rt-devel", "rhel-7-els.els:kernel-rt-doc", "rhel-7-els.els:kernel-rt-kvm-debuginfo", "rhel-7-els.els:kernel-rt-trace-debuginfo", "rhel-7-els.els:kernel-rt-trace-devel", "rhel-7-els.els:kernel-rt-trace-kvm-debuginfo", "rhel-7-els.els:kernel-tools-debuginfo", "rhel-7-els.els:kernel-tools-libs-devel", "rhel-7-els.els:perf-debuginfo", "rhel-7-els.els:python-perf-debuginfo", "rhel-8:kernel-rt-debug-devel", "rhel-8:kernel-rt-devel", "rhel-8:kernel-tools-libs-devel", "rhel-9:kernel-rt-debug-devel", "rhel-9:kernel-rt-devel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-46927" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46927" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-46927" } ], "remediations": [ { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "rhel-6-els.els:kernel", "rhel-6-els.els:kernel-abi-whitelists", "rhel-6-els.els:kernel-debug", "rhel-6-els.els:kernel-debuginfo-common-i686", "rhel-6-els.els:kernel-debuginfo-common-s390x", "rhel-6-els.els:kernel-debuginfo-common-x86_64", "rhel-6-els.els:kernel-firmware", "rhel-6-els.els:kernel-kdump", "rhel-6-els.els:kernel.src", "rhel-6-els.els:perf", "rhel-6-els.els:python-perf", "rhel-7-els.els:bpftool", "rhel-7-els.els:kernel", "rhel-7-els.els:kernel-abi-whitelists", "rhel-7-els.els:kernel-bootwrapper", "rhel-7-els.els:kernel-debug", "rhel-7-els.els:kernel-debuginfo-common-ppc64", "rhel-7-els.els:kernel-debuginfo-common-ppc64le", "rhel-7-els.els:kernel-debuginfo-common-s390x", "rhel-7-els.els:kernel-debuginfo-common-x86_64", "rhel-7-els.els:kernel-kdump", "rhel-7-els.els:kernel-rt", "rhel-7-els.els:kernel-rt-debug", "rhel-7-els.els:kernel-rt-debug-kvm", "rhel-7-els.els:kernel-rt-debuginfo-common-x86_64", "rhel-7-els.els:kernel-rt-kvm", "rhel-7-els.els:kernel-rt-trace", "rhel-7-els.els:kernel-rt-trace-kvm", "rhel-7-els.els:kernel-rt.src", "rhel-7-els.els:kernel-tools", "rhel-7-els.els:kernel-tools-libs", "rhel-7-els.els:kernel.src", "rhel-7-els.els:perf", "rhel-7-els.els:python-perf" ] }, { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "rhel-8:kernel-rt", "rhel-8:kernel-rt-core", "rhel-8:kernel-rt-debug", "rhel-8:kernel-rt-debug-core", "rhel-8:kernel-rt-debug-kvm", "rhel-8:kernel-rt-debug-modules", "rhel-8:kernel-rt-debug-modules-extra", "rhel-8:kernel-rt-kvm", "rhel-8:kernel-rt-modules", "rhel-8:kernel-rt-modules-extra", "rhel-8:kernel-rt.src", "rhel-8:kernel.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-9:kernel-rt", "rhel-9:kernel-rt-core", "rhel-9:kernel-rt-debug", "rhel-9:kernel-rt-debug-core", "rhel-9:kernel-rt-debug-kvm", "rhel-9:kernel-rt-debug-modules", "rhel-9:kernel-rt-debug-modules-core", "rhel-9:kernel-rt-debug-modules-extra", "rhel-9:kernel-rt-kvm", "rhel-9:kernel-rt-modules", "rhel-9:kernel-rt-modules-core", "rhel-9:kernel-rt-modules-extra", "rhel-9:kernel-rt.src" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.3, "baseSeverity": "LOW" }, "products": [ "rhel-6-els.els:kernel", "rhel-6-els.els:kernel-abi-whitelists", "rhel-6-els.els:kernel-debug", "rhel-6-els.els:kernel-debug-debuginfo", "rhel-6-els.els:kernel-debug-devel", "rhel-6-els.els:kernel-debuginfo", "rhel-6-els.els:kernel-debuginfo-common-i686", "rhel-6-els.els:kernel-debuginfo-common-s390x", "rhel-6-els.els:kernel-debuginfo-common-x86_64", "rhel-6-els.els:kernel-devel", "rhel-6-els.els:kernel-doc", "rhel-6-els.els:kernel-firmware", "rhel-6-els.els:kernel-headers", "rhel-6-els.els:kernel-kdump", "rhel-6-els.els:kernel-kdump-debuginfo", "rhel-6-els.els:kernel-kdump-devel", "rhel-6-els.els:kernel.src", "rhel-6-els.els:perf", "rhel-6-els.els:perf-debuginfo", "rhel-6-els.els:python-perf", "rhel-6-els.els:python-perf-debuginfo", "rhel-7-els.els:bpftool", "rhel-7-els.els:bpftool-debuginfo", "rhel-7-els.els:kernel", "rhel-7-els.els:kernel-abi-whitelists", "rhel-7-els.els:kernel-bootwrapper", "rhel-7-els.els:kernel-debug", "rhel-7-els.els:kernel-debug-debuginfo", "rhel-7-els.els:kernel-debug-devel", "rhel-7-els.els:kernel-debuginfo", "rhel-7-els.els:kernel-debuginfo-common-ppc64", "rhel-7-els.els:kernel-debuginfo-common-ppc64le", "rhel-7-els.els:kernel-debuginfo-common-s390x", "rhel-7-els.els:kernel-debuginfo-common-x86_64", "rhel-7-els.els:kernel-devel", "rhel-7-els.els:kernel-doc", "rhel-7-els.els:kernel-headers", "rhel-7-els.els:kernel-kdump", "rhel-7-els.els:kernel-kdump-debuginfo", "rhel-7-els.els:kernel-kdump-devel", "rhel-7-els.els:kernel-rt", "rhel-7-els.els:kernel-rt-debug", "rhel-7-els.els:kernel-rt-debug-debuginfo", "rhel-7-els.els:kernel-rt-debug-devel", "rhel-7-els.els:kernel-rt-debug-kvm", "rhel-7-els.els:kernel-rt-debug-kvm-debuginfo", "rhel-7-els.els:kernel-rt-debuginfo", "rhel-7-els.els:kernel-rt-debuginfo-common-x86_64", "rhel-7-els.els:kernel-rt-devel", "rhel-7-els.els:kernel-rt-doc", "rhel-7-els.els:kernel-rt-kvm", "rhel-7-els.els:kernel-rt-kvm-debuginfo", "rhel-7-els.els:kernel-rt-trace", "rhel-7-els.els:kernel-rt-trace-debuginfo", "rhel-7-els.els:kernel-rt-trace-devel", "rhel-7-els.els:kernel-rt-trace-kvm", "rhel-7-els.els:kernel-rt-trace-kvm-debuginfo", "rhel-7-els.els:kernel-rt.src", "rhel-7-els.els:kernel-tools", "rhel-7-els.els:kernel-tools-debuginfo", "rhel-7-els.els:kernel-tools-libs", "rhel-7-els.els:kernel-tools-libs-devel", "rhel-7-els.els:kernel.src", "rhel-7-els.els:perf", "rhel-7-els.els:perf-debuginfo", "rhel-7-els.els:python-perf", "rhel-7-els.els:python-perf-debuginfo", "rhel-8:kernel-rt", "rhel-8:kernel-rt-core", "rhel-8:kernel-rt-debug", "rhel-8:kernel-rt-debug-core", "rhel-8:kernel-rt-debug-devel", "rhel-8:kernel-rt-debug-kvm", "rhel-8:kernel-rt-debug-modules", "rhel-8:kernel-rt-debug-modules-extra", "rhel-8:kernel-rt-devel", "rhel-8:kernel-rt-kvm", "rhel-8:kernel-rt-modules", "rhel-8:kernel-rt-modules-extra", "rhel-8:kernel-rt.src", "rhel-8:kernel-tools-libs-devel", "rhel-8:kernel.src", "rhel-9:kernel-rt", "rhel-9:kernel-rt-core", "rhel-9:kernel-rt-debug", "rhel-9:kernel-rt-debug-core", "rhel-9:kernel-rt-debug-devel", "rhel-9:kernel-rt-debug-kvm", "rhel-9:kernel-rt-debug-modules", "rhel-9:kernel-rt-debug-modules-core", "rhel-9:kernel-rt-debug-modules-extra", "rhel-9:kernel-rt-devel", "rhel-9:kernel-rt-kvm", "rhel-9:kernel-rt-modules", "rhel-9:kernel-rt-modules-core", "rhel-9:kernel-rt-modules-extra", "rhel-9:kernel-rt.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "rhel-6-els.els:kernel", "rhel-6-els.els:kernel-abi-whitelists", "rhel-6-els.els:kernel-debug", "rhel-6-els.els:kernel-debug-debuginfo", "rhel-6-els.els:kernel-debug-devel", "rhel-6-els.els:kernel-debuginfo", "rhel-6-els.els:kernel-debuginfo-common-i686", "rhel-6-els.els:kernel-debuginfo-common-s390x", "rhel-6-els.els:kernel-debuginfo-common-x86_64", "rhel-6-els.els:kernel-devel", "rhel-6-els.els:kernel-doc", "rhel-6-els.els:kernel-firmware", "rhel-6-els.els:kernel-headers", "rhel-6-els.els:kernel-kdump", "rhel-6-els.els:kernel-kdump-debuginfo", "rhel-6-els.els:kernel-kdump-devel", "rhel-6-els.els:kernel.src", "rhel-6-els.els:perf", "rhel-6-els.els:perf-debuginfo", "rhel-6-els.els:python-perf", "rhel-6-els.els:python-perf-debuginfo", "rhel-7-els.els:bpftool", "rhel-7-els.els:bpftool-debuginfo", "rhel-7-els.els:kernel", "rhel-7-els.els:kernel-abi-whitelists", "rhel-7-els.els:kernel-bootwrapper", "rhel-7-els.els:kernel-debug", "rhel-7-els.els:kernel-debug-debuginfo", "rhel-7-els.els:kernel-debug-devel", "rhel-7-els.els:kernel-debuginfo", "rhel-7-els.els:kernel-debuginfo-common-ppc64", "rhel-7-els.els:kernel-debuginfo-common-ppc64le", "rhel-7-els.els:kernel-debuginfo-common-s390x", "rhel-7-els.els:kernel-debuginfo-common-x86_64", "rhel-7-els.els:kernel-devel", "rhel-7-els.els:kernel-doc", "rhel-7-els.els:kernel-headers", "rhel-7-els.els:kernel-kdump", "rhel-7-els.els:kernel-kdump-debuginfo", "rhel-7-els.els:kernel-kdump-devel", "rhel-7-els.els:kernel-rt", "rhel-7-els.els:kernel-rt-debug", "rhel-7-els.els:kernel-rt-debug-debuginfo", "rhel-7-els.els:kernel-rt-debug-devel", "rhel-7-els.els:kernel-rt-debug-kvm", "rhel-7-els.els:kernel-rt-debug-kvm-debuginfo", "rhel-7-els.els:kernel-rt-debuginfo", "rhel-7-els.els:kernel-rt-debuginfo-common-x86_64", "rhel-7-els.els:kernel-rt-devel", "rhel-7-els.els:kernel-rt-doc", "rhel-7-els.els:kernel-rt-kvm", "rhel-7-els.els:kernel-rt-kvm-debuginfo", "rhel-7-els.els:kernel-rt-trace", "rhel-7-els.els:kernel-rt-trace-debuginfo", "rhel-7-els.els:kernel-rt-trace-devel", "rhel-7-els.els:kernel-rt-trace-kvm", "rhel-7-els.els:kernel-rt-trace-kvm-debuginfo", "rhel-7-els.els:kernel-rt.src", "rhel-7-els.els:kernel-tools", "rhel-7-els.els:kernel-tools-debuginfo", "rhel-7-els.els:kernel-tools-libs", "rhel-7-els.els:kernel-tools-libs-devel", "rhel-7-els.els:kernel.src", "rhel-7-els.els:perf", "rhel-7-els.els:perf-debuginfo", "rhel-7-els.els:python-perf", "rhel-7-els.els:python-perf-debuginfo", "rhel-8:kernel-rt", "rhel-8:kernel-rt-core", "rhel-8:kernel-rt-debug", "rhel-8:kernel-rt-debug-core", "rhel-8:kernel-rt-debug-devel", "rhel-8:kernel-rt-debug-kvm", "rhel-8:kernel-rt-debug-modules", "rhel-8:kernel-rt-debug-modules-extra", "rhel-8:kernel-rt-devel", "rhel-8:kernel-rt-kvm", "rhel-8:kernel-rt-modules", "rhel-8:kernel-rt-modules-extra", "rhel-8:kernel-rt.src", "rhel-8:kernel-tools-libs-devel", "rhel-8:kernel.src", "rhel-9:kernel-rt", "rhel-9:kernel-rt-core", "rhel-9:kernel-rt-debug", "rhel-9:kernel-rt-debug-core", "rhel-9:kernel-rt-debug-devel", "rhel-9:kernel-rt-debug-kvm", "rhel-9:kernel-rt-debug-modules", "rhel-9:kernel-rt-debug-modules-core", "rhel-9:kernel-rt-debug-modules-extra", "rhel-9:kernel-rt-devel", "rhel-9:kernel-rt-kvm", "rhel-9:kernel-rt-modules", "rhel-9:kernel-rt-modules-core", "rhel-9:kernel-rt-modules-extra", "rhel-9:kernel-rt.src" ] } ], "title": "Use get_user_pages_unlocked() call to handle mmap assert" } ] }