NetSight
IP …
high7.0

CVE-2021-4083

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() …

Impact

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.294
from 4.5 before 4.9.292
from 4.10 before 4.14.257
from 4.15 before 4.19.220
from 4.20 before 5.4.164
from 5.5.0 before 5.10.84
NetappH410c Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
DebianDebian Linux
Versions 9.0, 10.0
NetappHci Management Node
All versions
NetappSolidfire
All versions

Weakness classification

CWE-416CWE-362

References