THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-46929 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump(): BUG: KASAN: use-after-free in __lock_acquire+0x36d9

[NVD] CVE-2021-46929 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump(): BUG: KASAN: use-after-free in __lock_acquire+0x36d9

lownvdPublished 2024-02-27

CVE-2021-46929 CVSS: 7.8 HIGH Published: 2024-02-27T10:15:07.573

In the Linux kernel, the following vulnerability has been resolved:

sctp: use call_rcu to free endpoint

This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump():

BUG: KASAN: use-after-free in __lock_acquire+0x36d9/0x4c20 Call Trace: __lock_acquire+0x36d9/0x4c20

Indicators of compromise

CVE-2021-46929cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-46929