CVE-2021-46971

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix unconditional security_locked_down() call Currently, the lockdown state is queried unconditionally, even though its result is used only if the PERF_SAMPLE_REGS_INTR bit is set in attr.sample_type. While that doesn't matter in case of the Lockdown LSM, it causes trouble with the SELinux's lockdown hook implementation. SELinux implements the locked_down hook with a check whether the current task's type has the corresponding "lockdown" class permission ("integrity" or "confidentiality") allowed in the policy. This means that calling the hook when the access control decision would be ignored generates a bogus permission check and audit record. Fix this by checking sample_type first and only calling the hook when its result would be honored.

• https://git.kernel.org/stable/c/08ef1af4de5fe7de9c6d69f1e22e51b66e385d9bPatch
• https://git.kernel.org/stable/c/4348d3b5027bc3ff6336368b6c60605d4ef8e1cePatch
• https://git.kernel.org/stable/c/b246759284d6a2bc5b6f1009caeeb3abce2ec9ffPatch
• https://git.kernel.org/stable/c/c7b0208ee370b89d20486fae71cd9abb759819c1Patch
• https://git.kernel.org/stable/c/f5809ca4c311b71bfaba6d13f4e39eab0557895ePatch
• https://git.kernel.org/stable/c/08ef1af4de5fe7de9c6d69f1e22e51b66e385d9bPatch
• https://git.kernel.org/stable/c/4348d3b5027bc3ff6336368b6c60605d4ef8e1cePatch
• https://git.kernel.org/stable/c/b246759284d6a2bc5b6f1009caeeb3abce2ec9ffPatch
• https://git.kernel.org/stable/c/c7b0208ee370b89d20486fae71cd9abb759819c1Patch
• https://git.kernel.org/stable/c/f5809ca4c311b71bfaba6d13f4e39eab0557895ePatch

Published

Feb 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-46965In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2021-46966In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-46967In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-46968In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-46969In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-46970In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-46972In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-46973In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-46974In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-46975Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2021-46976In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-46977In the Linux kernel, the following vulnerability has been re…5.5