CVE-2021-29266

Description

An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.07

Associated Vulnerability

Vulnerability	OS Platform
Linux kernel for OEM systems (USN-4948-1) linux-image-oem-20.04b_5.10.0.1026.27_amd64.deb	Linux
Linux kernel for OEM systems (USN-4948-1) linux-image-5.10.0-1026-oem_5.10.0-1026.27_amd64.deb	Linux
Kernel-uek update (ELSA-2021-9220) kernel-uek-5.4.17-2102.201.3.el8uek.x86_64.rpm	Linux
Kernel-uek-debug update (ELSA-2021-9220) kernel-uek-debug-5.4.17-2102.201.3.el8uek.x86_64.rpm	Linux
Kernel-uek-debug-devel update (ELSA-2021-9220) kernel-uek-debug-devel-5.4.17-2102.201.3.el8uek.x86_64.rpm	Linux
Kernel-uek-devel update (ELSA-2021-9220) kernel-uek-devel-5.4.17-2102.201.3.el8uek.x86_64.rpm	Linux
Kernel-uek-doc update (ELSA-2021-9220) kernel-uek-doc-5.4.17-2102.201.3.el8uek.noarch.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234