CVE-2021-47123

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Mar 15, 2024
Updated: Jan 14, 2025
CWE ID 416
CWE ID 415

Summary

CVE-2021-47123 is a vulnerability affecting the Linux kernel that has been addressed. This issue involves a double free problem in the `nio_uring` subsystem. Specifically, when there is a race condition during completion, a linked timeout on the request may not be properly removed from the master list, leading to a use-after-free scenario. To mitigate this vulnerability, it is essential to ensure that linked timeouts are always removed from the master request list upon completion to prevent potential memory corruption.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share