A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAPSYSADMIN capability) could use this flaw to starve the resources causing denial of service.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-3679.json"
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@67f0d6d9883c13174669f88adac4f0ee656cc16a",
"digest": {
"line_hashes": [
"5671806500113261964672255766431443810",
"37720338717114349524429849231342997071",
"62163458124503125928274261200010704150",
"67852638467622573534931052137637435261",
"263410193952536810660725905119854945151",
"15397059633231583450304044485359298682",
"108251748404552642323760996305798404141"
],
"threshold": 0.9
},
"id": "CVE-2021-3679-35b508a6",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "kernel/trace/ring_buffer.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@67f0d6d9883c13174669f88adac4f0ee656cc16a",
"digest": {
"length": 304.0,
"function_hash": "171597549124186643071765694230106413440"
},
"id": "CVE-2021-3679-93944a8b",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "kernel/trace/ring_buffer.c",
"function": "rb_per_cpu_empty"
}
}
]