Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2021-41073 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2021-41073
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 up to and including 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation.
Linux Linux KernelDebian Debian Linux 10.0Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -
7.8
CVSSv3
CVE-2020-16119
Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0...
Linux Linux Kernel -Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Debian Debian Linux 9.0Debian Debian Linux 11.0
7.1
CVSSv3
CVE-2021-3743
An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local malicious user to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest ...
Linux Linux Kernel 5.14Linux Linux Kernel 5.17Linux Linux KernelFedoraproject Fedora 34Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Policy 22.2.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.1
7.8
CVSSv3
CVE-2021-38166
In kernel/bpf/hashtab.c in the Linux kernel up to and including 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.
Linux Linux KernelFedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 11.0
7.1
CVSSv3
CVE-2021-3739
A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local malicious user to crash the system or leak kernel internal information. The...
Linux Linux KernelFedoraproject Fedora 34Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -
7.8
CVSSv3
CVE-2021-37576
arch/powerpc/kvm/book3s_rtas.c in the Linux kernel up to and including 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.
Linux Linux KernelFedoraproject Fedora 33Fedoraproject Fedora 34
7.8
CVSSv3
CVE-2021-38160
In drivers/char/virtio_console.c in the Linux kernel prior to 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in a...
Linux Linux KernelNetapp Hci Bootstrap Os -Netapp Solidfire -Netapp Hci Management Node -Netapp Element Software -Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Enterprise Linux 8.0
6.5
CVSSv3
CVE-2020-3702
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Comp...
Qualcomm Apq8053 Firmware -Qualcomm Ipq4019 Firmware -Qualcomm Ipq8064 Firmware -Qualcomm Msm8909w Firmware -Qualcomm Msm8996au Firmware -Qualcomm Qca9531 Firmware -Qualcomm Qcn5502 Firmware -Qualcomm Qcs405 Firmware -Qualcomm Sdx20 Firmware -Qualcomm Sm6150 Firmware -Qualcomm Sm7150 Firmware -Debian Debian Linux 10.0Arista Access PointDebian Debian Linux 9.0
7
CVSSv3
CVE-2021-40490
A race condition exists in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel up to and including 5.13.13.
Linux Linux KernelFedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Debian Debian Linux 11.0Netapp Aff A250 Firmware -Netapp Fas 500f Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp H610c Firmware -Netapp H610s Firmware -Netapp H615c Firmware -
5.5
CVSSv3
CVE-2021-3679
A lack of CPU resource in the Linux kernel tracing module functionality in versions before 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing ...
Linux Linux Kernel 5.14Linux Linux KernelRedhat Enterprise Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook