CVEvulnerability

CVE-2021-3715

7.8 HIGH Published 2022-03-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-416

Description

A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected configurations

• linux linux kernel (>= 3.18 < 4.4.218) • linux linux kernel (>= 4.5 < 4.9.218) • linux linux kernel (>= 4.10 < 4.14.175) • linux linux kernel (>= 4.15 < 4.19.114) • linux linux kernel (>= 4.20 < 5.4.29) • linux linux kernel (>= 5.5.0 < 5.5.14)

Related

Weakness · CWE (1)

References