CVE-2021-47082

Summary

CVE-2021-47082 is a vulnerability in the Linux kernel that affected the tun driver. The issue involved a double free in the tun_free_netdev() function, which has been resolved by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()). This pairing of initialization and destruction routines ensures that any errors during device registration are handled appropriately. The vulnerability was identified as a double-free or invalid-free error in selinux_tun_dev_free_security, and was triggered by a call to slab_free. The affected kernel version is 5.16.0-rc2-syzk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.