Fiche vulnérabilité

CVE-2021-4083 : faille élevée linux linux kernel (CVSS 7.0)

Description

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.

En bref

Sévérité: Élevée (CVSS 7.0)
Vecteur CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation active: Non signalée par la CISA
Publication: 18 janv. 2022
Dernière mise à jour: 17 juin 2026

Produits concernés

linux linux kernel
netapp h410c firmware
netapp h300s firmware
netapp h500s firmware
netapp h700s firmware
netapp h300e firmware
netapp h500e firmware
netapp h700e firmware
netapp h410s firmware
debian debian linux
netapp hci management node
netapp solidfire
oracle communications cloud native core binding support function
oracle communications cloud native core network exposure function
oracle communications cloud native core policy

Références

Rechercher une autre vulnérabilité dans la base CVE