CVE-2021-3347
An issue was discovered in the Linux kernel through 5.10.11.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: poc
- Automatable: no
- Technical impact: total
Summary
An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: poc · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- n/a n/a
Version range not reported
References 20
git.kernel.org
- pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=c64396cc36c6e60704ab06c1fb1c4a46179c9120
- pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=34b1a1ce1458f50ef27c54e28eb9b1947012907a
- pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f2dac39d93987f7de1e20b3988c8685523247ae2
- pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=6ccc84f917d33312eb2846bd7b567639f585ad6d
- pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=2156ac1934166d6deb6cd0f6ffc4c1076ec63697
- pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=c5cade200ab9a2a3be9e7f32a752c8d86b502ec7
- pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04b79c55201f02ffd675e1231d731365e335c307
- pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9