CVE-2021-4083CWE-416

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget()…

published January 18, 2022

CVSS
—
EPSS
0%
Percentile
22.6
In the wild
Unconfirmed
What it is

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00310 · 22.6th percentile
Weakness
CWE-416 · Use After Free
Published
2022-01-18T16:51Z
EPSS history
Timeline
  • 18 JAN 16:51Z
    A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget()…
    cvelistv5