CVE-2021-47049
published 2024-02-28CVE-2021-47049: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.23%
13.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Use after free in __vmbus_open()
The "open_info" variable is added to the &vmbus_connection.chn_msg_list,
but the error handling frees "open_info" without removing it from the
list. This will result in a use after free. First remove it from the
list, and then free it.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.38-1 (bookworm) | linux 5.10.38-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 4.13.9 < 4.14 | 4.14 |
| linux | linux | >= 6f3d791f300618caf82a2be0c27456edd76d5164 < d5c7b42c9f56ca46b286daa537d181bd7f69214f | d5c7b42c9f56ca46b286daa537d181bd7f69214f |
| linux | linux | >= 6f3d791f300618caf82a2be0c27456edd76d5164 < f37dd5d1b5d38a79a4f7b8dd7bbb705505f05560 | f37dd5d1b5d38a79a4f7b8dd7bbb705505f05560 |
| linux | linux | >= 6f3d791f300618caf82a2be0c27456edd76d5164 < 2728f289b3270b0e273292b46c534421a33bbfd5 | 2728f289b3270b0e273292b46c534421a33bbfd5 |
| linux | linux | >= 6f3d791f300618caf82a2be0c27456edd76d5164 < 3e9bf43f7f7a46f21ec071cb47be92d0874c48da | 3e9bf43f7f7a46f21ec071cb47be92d0874c48da |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 4.14 < 5.10.37 | 5.10.37 |
| linux | linux_kernel | >= 5.11 < 5.11.21 | 5.11.21 |
| linux | linux_kernel | >= 5.12 < 5.12.4 | 5.12.4 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: Drivers: hv: vmbus: Use after free in __vmbus_open()
vendor_redhat·2024-02-28·CVSS 7.8
CVE-2021-47049 [HIGH] CWE-416 kernel: Drivers: hv: vmbus: Use after free in __vmbus_open()
kernel: Drivers: hv: vmbus: Use after free in __vmbus_open()
In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Use after free in __vmbus_open()
The "open_info" variable is added to the &vmbus_connection.chn_msg_list,
but the error handling frees "open_info" without removing it from the
list. This will result in a use after free. First remove it from the
list, and then free it.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9)
Debian
CVE-2021-47049: linux - In the Linux kernel, the following vulnerability has been resolved: Drivers: hv...
vendor_debian·2021·CVSS 7.8
CVE-2021-47049 [HIGH] CVE-2021-47049: linux - In the Linux kernel, the following vulnerability has been resolved: Drivers: hv...
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to the &vmbus_connection.chn_msg_list, but the error handling frees "open_info" without removing it from the list. This will result in a use after free. First remove it from the list, and then free it.
Scope: local
bookworm: resolved (fixed in 5.10.38-1)
bullseye: resolved (fixed in 5.10.38-1)
forky: resolved (fixed in 5.10.38-1)
sid: resolved (fixed in 5.10.38-1)
trixie: resolved (fixed in 5.10.38-1)
GHSA
GHSA-vw5q-4j3r-jcj8: In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Use after free in __vmbus_open()
The "open_info" variable is
ghsa_unreviewed·2024-02-28
CVE-2021-47049 [HIGH] CWE-416 GHSA-vw5q-4j3r-jcj8: In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Use after free in __vmbus_open()
The "open_info" variable is
In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Use after free in __vmbus_open()
The "open_info" variable is added to the &vmbus_connection.chn_msg_list,
but the error handling frees "open_info" without removing it from the
list. This will result in a use after free. First remove it from the
list, and then free it.
OSV
CVE-2021-47049: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is a
osv·2024-02-28·CVSS 7.8
CVE-2021-47049 [HIGH] CVE-2021-47049: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is a
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to the &vmbus_connection.chn_msg_list, but the error handling frees "open_info" without removing it from the list. This will result in a use after free. First remove it from the list, and then free it.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/2728f289b3270b0e273292b46c534421a33bbfd5https://git.kernel.org/stable/c/3e9bf43f7f7a46f21ec071cb47be92d0874c48dahttps://git.kernel.org/stable/c/d5c7b42c9f56ca46b286daa537d181bd7f69214fhttps://git.kernel.org/stable/c/f37dd5d1b5d38a79a4f7b8dd7bbb705505f05560https://git.kernel.org/stable/c/2728f289b3270b0e273292b46c534421a33bbfd5https://git.kernel.org/stable/c/3e9bf43f7f7a46f21ec071cb47be92d0874c48dahttps://git.kernel.org/stable/c/d5c7b42c9f56ca46b286daa537d181bd7f69214fhttps://git.kernel.org/stable/c/f37dd5d1b5d38a79a4f7b8dd7bbb705505f05560
2024-02-28
Published