CVE-2021-3347

Katalog CVE

CVSS 7.8 · High EPSS 1,4%

Kerentanan Use After Free pada linux kernel, debian linux +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.

Rincian

Terbit di NVD

29 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04b79c55201f02ffd675e1231d731365... mailing list · patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12bb3f7f1b03d5913b3f9d4236a488aa... mailing list · patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2156ac1934166d6deb6cd0f6ffc4c107... mailing list · patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34b1a1ce1458f50ef27c54e28eb9b194... mailing list · patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6ccc84f917d33312eb2846bd7b567639... mailing list · patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5cade200ab9a2a3be9e7f32a752c8d8... mailing list · patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c64396cc36c6e60704ab06c1fb1c4a46... mailing list · patch · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2dac39d93987f7de1e20b3988c86855... mailing list · patch · advisory vendor
• http://www.openwall.com/lists/oss-security/2021/01/29/4 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/29/5 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/02/01/4 exploit · mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210304-0005/ advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4843 advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2021/01/29/1 mailing list · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2021/01/29/3 mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXAVDAK4RLAHB...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QOBMXDJABYE76...