A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
Configuration 12 (hide)
|
History
21 Nov 2024, 06:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2029923 - Issue Tracking, Patch, Third Party Advisory | |
| References | () https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9 - Mailing List, Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html - Mailing List, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - Mailing List, Third Party Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20220217-0005/ - Third Party Advisory | |
| References | () https://www.debian.org/security/2022/dsa-5096 - Third Party Advisory | |
| References | () https://www.oracle.com/security-alerts/cpujul2022.html - Patch, Third Party Advisory |
26 Jun 2023, 19:00
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-362 | |
| References | (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9 - Mailing List, Patch |
24 Feb 2023, 15:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | (N/A) https://www.oracle.com/security-alerts/cpujul2022.html - Patch, Third Party Advisory | |
| CPE | cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:* |
25 Jul 2022, 18:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Mar 2022, 17:06
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 6.9
v3 : 7.0 |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2029923 - Issue Tracking, Patch, Third Party Advisory | |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html - Mailing List, Third Party Advisory | |
| References | (DEBIAN) https://www.debian.org/security/2022/dsa-5096 - Third Party Advisory | |
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20220217-0005/ - Third Party Advisory | |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - Mailing List, Third Party Advisory |
10 Mar 2022, 17:44
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Feb 2022, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Jan 2022, 18:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 4.4
v3 : 7.0 |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2029923 - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9 - Patch, Vendor Advisory | |
| CWE | CWE-416 |
18 Jan 2022, 18:01
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-18 17:15
Updated : 2024-11-21 06:36
NVD link : CVE-2021-4083
Mitre link : CVE-2021-4083
CVE.ORG link : CVE-2021-4083
JSON object : View
Products Affected
netapp
- h700s_firmware
- h300s_firmware
- h300e_firmware
- h410s
- h300e
- h700s
- h500e_firmware
- h500e
- h700e
- h300s
- hci_management_node
- h410c
- h410c_firmware
- solidfire
- h500s
- h500s_firmware
- h700e_firmware
- h410s_firmware
oracle
- communications_cloud_native_core_network_exposure_function
- communications_cloud_native_core_policy
- communications_cloud_native_core_binding_support_function
debian
- debian_linux
linux
- linux_kernel