Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2021-0338

Good to know:

icon

Date: June 4, 2021

Linux Kernel in versions v2.6.12 to v2.6.39-rc7, v3.0 to v3.9-rc8, v4.0 to v4.4.270, v4.10 to v4.14.234, v5.0 to v5.4.123 and v5.10.42 to v5.12.8 contains a use-after-free vulnerability at drm/amdgpu.

Language: C

Severity Score

Related Resources (2)

https://github.com/gregkh/linux/commit/0707c3fea8102d211631ba515ef2159707561b0d
https://www.mend.io/vulnerability-database/WS-2021-0338

Severity Score

Weakness Type (CWE)

Use After Free

CWE-416

Top Fix

icon

Upgrade Version

Upgrade to version linux-libc-headers - 5.8;linux-yocto - 4.10+gitAUTOINC+805ea440c7_b259a5d744;linux-yocto - 4.8.26+gitAUTOINC+1c60e003c7_27efc3ba68

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): HIGH
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us