NetSight
IP …
high7.0

CVE-2021-44733

A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11.

Impact

A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.12 before 4.14.261
from 4.15 before 4.19.224
from 4.20 before 5.4.170
from 5.5 before 5.10.89
from 5.11 before 5.15.12
RedhatEnterprise Linux
Version 8.0
FedoraprojectFedora
Version 35
DebianDebian Linux
Versions 9.0, 10.0, 11.0
NetappH410c Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions

Weakness classification

CWE-362

References