CVE-2021-47616CWE-416

CVE-2021-47616

High · published June 19, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA: Fix use-after-free in rxe_queue_cleanup

On error handling path in rxe_qp_from_init() qp->sq.queue is freed and

then rxe_create_qp() will drop last reference to this object. qp clean up

function will try to free this queue one time and it causes UAF bug.

Fix it by zeroing queue pointer after freeing queue in rxe_qp_from_init().

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-416 · Use After Free
Published
2024-06-19T19:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.105.15.10
References (4)
EPSS history
Timeline
  • 19 JUN 14:58Z
    RDMA: Fix use-after-free in rxe_queue_cleanup
    cvelistv5