Improper Initialization in Linux kernel - CVE-2021-46932

Vulnerability identifier: #VU92173

CSH Severity: Low

CVSS v4 BT: 0.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46932

CWE-ID: CWE-665

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to improper initialization. A local user can run a specially crafted application to perform a denial of service attack.

Linux kernel
Ubuntu
Dell Data Protection Central
PowerProtect DP Series Appliance (IDPA)
Storage Resource Manager
Dell Policy Manager for Secure Connect Gateway (SCG)
EMC Cloud Tiering Appliance
linux-image-aws (Ubuntu package)
linux-image-4.4.0-1134-aws (Ubuntu package)
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-4.4.0-257-lowlatency (Ubuntu package)
linux-image-4.4.0-257-generic (Ubuntu package)
linux-image-4.4.0-1172-aws (Ubuntu package)
linux-image-4.4.0-1135-kvm (Ubuntu package)
Dell EMC Storage Monitoring and Reporting (SMR)
Dell Secure Connect Gateway

Install updates from vendor's website.

Linux kernel - addressed in versions 4.4.298, 4.9.296, 4.14.261, 4.19.224, 5.4.170, 5.10.90, 5.15.13, 5.16
linux-image-aws (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-4.4.0-1134-aws (Ubuntu package) - update to Ubuntu Pro
linux-image-virtual-lts-xenial (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-lowlatency (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-kvm (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-generic-lts-xenial (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-generic (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-4.4.0-257-lowlatency (Ubuntu package) - update to Ubuntu Pro
linux-image-4.4.0-257-generic (Ubuntu package) - update to Ubuntu Pro
linux-image-4.4.0-1172-aws (Ubuntu package) - update to Ubuntu Pro
linux-image-4.4.0-1135-kvm (Ubuntu package) - update to Ubuntu Pro
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Storage Resource Manager - update to 5.0.1.0
Dell Policy Manager for Secure Connect Gateway (SCG) - update to 5.24.00.14
Dell Secure Connect Gateway - update to 5.24.00.14
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

• https://git.kernel.org/stable/c/d2cb2bf39a6d17ef4bdc0e59c1a35cf5751ad8f4
• https://git.kernel.org/stable/c/d1962f263a176f493400b8f91bfbf2bfedce951e
• https://git.kernel.org/stable/c/292d2ac61fb0d9276a0f7b7ce4f50426f2a1c99f
• https://git.kernel.org/stable/c/a02e1404e27855089d2b0a0acc4652c2ce65fe46
• https://git.kernel.org/stable/c/975774ea7528b489930b76a77ffc4d5379b95ff2
• https://git.kernel.org/stable/c/9f329d0d6c91142cf0ad08d23c72dd195db2633c
• https://git.kernel.org/stable/c/e79ff8c68acb1eddf709d3ac84716868f2a91012
• https://git.kernel.org/stable/c/9f3ccdc3f6ef10084ceb3a47df0961bec6196fd0
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.261
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.224
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.298
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.296
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.90
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.13
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.170

• Multiple vulnerabilities in Dell Secure Connect Gateway Policy Manager
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Ubuntu update for linux
• Multiple vulnerabilities in Dell Data Protection Central