CVE-2021-26708

CVSS v3.1 7 (High)

CVSS v2.0 6.9 (Medium)

EPSS 0.04 % (5^th)

Affected Products 12

Advisories 6

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

Weaknesses

CWE-667: Improper Locking

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2021-02-05 14:15:18
(3 years ago)
Updated Date: 2023-11-09 13:57:20
(10 months ago)

Affected Products

Linux

Linux Kernel

Netapp

Configuration #1

		CPE23	From	Up To
	Linux Kernel from 5.5 version and prior 5.10.13 version	cpe:2.3:o:linux:linux_kernel	>= 5.5	< 5.10.13

Configuration #2

		CPE23	From	Up To
	Netapp Aff Baseboard Management Controller	cpe:2.3:a:netapp:aff_baseboard_management_controller:-
	Netapp Cloud Backup	cpe:2.3:a:netapp:cloud_backup:-
	Netapp Fas Baseboard Management Controller	cpe:2.3:a:netapp:fas_baseboard_management_controller:-
	Netapp Solidfire & Hci Management Node	cpe:2.3:a:netapp:solidfire_\%26_hci_management_node:-
	Netapp Solidfire Baseboard Management Controller	cpe:2.3:a:netapp:solidfire_baseboard_management_controller:-

Configuration #3

AND

		CPE23	Up To
OR
	Netapp Baseboard Management Controller 500f Firmware prior 15.3 version	cpe:2.3:o:netapp:baseboard_management_controller_500f_firmware	< 15.3
OR
	Running on/with
	Netapp 500f	cpe:2.3:h:netapp:500f:-

Configuration #4

AND

		CPE23	Up To
OR
	Netapp Baseboard Management Controller A250 Firmware prior 15.3 version	cpe:2.3:o:netapp:baseboard_management_controller_a250_firmware	< 15.3
OR
	Running on/with
	Netapp A250	cpe:2.3:h:netapp:a250:-

Configuration #5

AND

		CPE23
OR
	Netapp Hci H410c Firmware	cpe:2.3:o:netapp:hci_h410c_firmware:-
OR
	Running on/with
	Netapp Hci H410c	cpe:2.3:h:netapp:hci_h410c:-