IT

Tracker / CVE-2021-47049

CVE-2021-47049

High 8.4

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to the &vmbus_connection.chn_msg_list, but the error handling frees "open_info" without removing it from the list. This will result in a use after free. First remove it from the list, and then free it.

Affected products and versions

linux linux_kernel · 4.14 → 5.10.37
linux linux_kernel · 5.11 → 5.11.21
linux linux_kernel · 5.12 → 5.12.4

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References