CVE-2021-3483CWE-416

CVE-2021-3483

High · published May 17, 2021

CVSS v3.1
7.8
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.0th percentile
Weakness
CWE-416 · Use After Free
Published
2021-05-17T16:15Z
Affected products (16)
ProductVersionsFixed in
linux/linux_kernel< 5.125.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
netapp/cloud_backupall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h300e_firmwareall versions—
netapp/h500e_firmwareall versions—
netapp/h700e_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h410c_firmwareall versions—
References (10)
EPSS history
Timeline
  • 17 MAY 11:25Z
    A flaw was found in the Nosy driver in the Linux kernel
    cvelistv5