Improper Resource Shutdown or Release in Linux kernel - CVE-2021-46953

Vulnerability identifier: #VU92189

CSH Severity: Low

CVSS v4 BT: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46953

CWE-ID: CWE-404

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources. A local privileged user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Linux kernel
Dell Data Protection Central
PowerProtect DP Series Appliance (IDPA)
Storage Resource Manager
EMC Cloud Tiering Appliance
Dell EMC Storage Monitoring and Reporting (SMR)
Dell Secure Connect Gateway

Install updates from vendor's website.

Linux kernel - addressed in versions 4.14.233, 4.19.191, 5.4.118, 5.10.36, 5.11.20, 5.12.3, 5.13
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Dell Secure Connect Gateway - update to 5.24.00.14
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

• https://git.kernel.org/stable/c/c3385a9122f8db15b453e07bfc88117fce7f3724
• https://git.kernel.org/stable/c/7b2162db1498c71962a4bb2f776fa4e76d4d305b
• https://git.kernel.org/stable/c/504632a3577a049dd9bb7aabae5b4476f9c586b4
• https://git.kernel.org/stable/c/e0f2d86481eaa83df33b0793f75212919db7a19d
• https://git.kernel.org/stable/c/42e69521ee1fa5abf21f478d147d06bbfe6bf6a8
• https://git.kernel.org/stable/c/596e079c362ac17ed02aa1b99fdc444d62072a01
• https://git.kernel.org/stable/c/1ecd5b129252249b9bc03d7645a7bda512747277

• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Data Protection Central