CVEvulnerability

CVE-2021-3483

7.8 HIGH Published 2021-05-17 Modified 2026-08-05 Official page ↗
Status
Modified
Published
2021-05-17
Last modified
2026-08-05
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-416

Description

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected

Affected configurations

• linux linux kernel (< 5.12) • linux linux kernel 5.12 • debian debian linux 9.0 • netapp cloud backup • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h300e firmware • netapp h500e firmware • netapp h700e firmware • netapp h410s firmware • netapp h410c firmware

Related

Weakness · CWE (1)

References