imPC@ndo IT

Tracker / CVE-2021-4028

CVE-2021-4028

High 7.8

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.

Affected products and versions

linux linux_kernel · 5.10 → 5.10.71
linux linux_kernel · 5.11 → 5.14.10
suse linux_enterprise

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References