CVE-2021-47614CWE-416

CVE-2021-47614

High · published June 19, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Fix a user-after-free in add_pble_prm

When irdma_hmc_sd_one fails, 'chunk' is freed while its still on the PBLE

info list.

Add the chunk entry to the PBLE info list only after successful setting of

the SD in irdma_hmc_sd_one.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-416 · Use After Free
Published
2024-06-19T19:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 5.14, < 5.15.105.15.10
References (4)
EPSS history
Timeline
  • 19 JUN 14:58Z
    RDMA/irdma: Fix a user-after-free in add_pble_prm
    cvelistv5