We found results for “”
WS-2021-0467
Good to know:
Date: November 29, 2021
In Linux/Kernel is vulnerable to use-after-free in CCMP/GCMP RX in tools/lib/bpf/strset.c
Language: C
Severity Score
Severity Score
Weakness Type (CWE)
Out-of-bounds Write
CWE-787Top Fix
Upgrade Version
Upgrade to version Linux/Kernel - v4.9.285, v4.14.249, v4.19.209, v5.4.151, v5.10.71, v5.14.10, v5.15-rc4
CVSS v3.1
Base Score: |
|
---|---|
Attack Vector (AV): | LOCAL |
Attack Complexity (AC): | LOW |
Privileges Required (PR): | NONE |
User Interaction (UI): | NONE |
Scope (S): | UNCHANGED |
Confidentiality (C): | LOW |
Integrity (I): | LOW |
Availability (A): | LOW |