HIGH 7.8 Microsoft
CVE-2021-3347
An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling allowing local users to execute code in the kernel aka CID-34b1a1ce1458.
Microsoft Security Update 2021-Jan: An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling allowing local users to execute code in the kernel aka CID-34b1a1ce1458.
Affected Products
- kernel-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- kernel-devel-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- kernel-drivers-accessibility-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- kernel-drivers-sound-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- kernel-docs-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- kernel-oprofile-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- kernel-tools-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- kernel-debuginfo-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-3347
- https://nvd.nist.gov/vuln/detail/CVE-2021-3347
This high severity vulnerability with a CVSS score of 7.8 was published on 2021-01-12 via Microsoft. Affected: kernel-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64, kernel-devel-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64, kernel-drivers-accessibility-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64 and 5 more.
vulnfeed aggregates 10539 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.