CVE-2021-44733CWE-362

CVE-2021-44733

High · published December 22, 2021

CVSS v3.1
7.0
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00748 · 54.4th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2021-12-22T22:15Z
Affected products (18)
ProductVersionsFixed in
linux/linux_kernel≥ 4.12, < 4.14.2614.14.261
linux/linux_kernel≥ 4.15, < 4.19.2244.19.224
linux/linux_kernel≥ 4.20, < 5.4.1705.4.170
linux/linux_kernel≥ 5.5, < 5.10.895.10.89
linux/linux_kernel≥ 5.11, < 5.15.125.15.12
redhat/enterprise_linuxall versions—
fedoraproject/fedoraall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
netapp/h410c_firmwareall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h300e_firmwareall versions—
netapp/h500e_firmwareall versions—
netapp/h700e_firmwareall versions—
netapp/h410s_firmwareall versions—
References (14)
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dfd0743f1d9ea76931510ed150334d571fbab49d · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/tee/tee_shm.c · [email protected]https://github.com/pjlantz/optee-qemu/blob/main/README.md · [email protected]https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html · [email protected]https://lore.kernel.org/lkml/20211215092501.1861229-1-jens.wiklander%40linaro.org/ · [email protected]https://security.netapp.com/advisory/ntap-20220114-0003/ · [email protected]https://www.debian.org/security/2022/dsa-5096 · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dfd0743f1d9ea76931510ed150334d571fbab49d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/tee/tee_shm.c · af854a3a-2127-422b-91ae-364da2661108https://github.com/pjlantz/optee-qemu/blob/main/README.md · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/lkml/20211215092501.1861229-1-jens.wiklander%40linaro.org/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20220114-0003/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5096 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 DEC 00:00Z
    A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11
    cvelistv5