CVE-2021-4083

Related Vulnerabilities: CVE-2021-4083  

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system.

Description

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system.

Additional Information

  • Bugzilla 2029923: CVE-2021-4083 kernel: fget: check that the fd still exists after getting a ref to it
  • FAQ: Frequently asked questions about CVE-2021-4083