VDB

CVE-2021-3483

CVE-2021-3483 PUBLISHED

Reported by redhat · Published May 17, 2021

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
kernel-tools-develAmazon Linux4.14.231-173.360.amzn2
kernel-livepatch-4.14.231-173.360Amazon Linux1.0-0.amzn2
linuxArch Linux5.11.12.arch1-1
kernel-develAmazon Linux4.14.231-173.360.amzn2
linux-ltsArch Linux5.10.28-1
perfAmazon Linux4.14.231-173.360.amzn2
kernelAmazon Linux4.14.231-173.360.amzn2
kernel-headersAmazon Linux4.14.231-173.360.amzn2
linux-hardenedArch Linux5.11.13.hardened1-1
linux-gke-5.4Ubuntu:18.04:LTS5.4.0-1044.46~18.04.1
linux-azure-4.15Ubuntu:18.04:LTS4.15.0-1115.128
linuxUbuntu:20.04:LTS5.4.0-74.83

42 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Linuxkernel0, 4.5, 4.10
amazon:2kernel-tools-devel0
amazon:2kernel-livepatch-4.14.231-173.3600
archlinux0
amazon:2kernel-devel0
archlinux-lts0
amazon:2perf0
amazon:2kernel0
amazon:2kernel-headers0
archlinux-hardened0
n/akernel5.12-rc6
amazon:2python-perf0
archlinux-zen0
Linuxkernel4.20, 5.5, 5.11
amazon:2kernel-tools0

Timeline

  • Apr 7, 2021 CVE Published
  • May 18, 2021 EPSS Score (30 in total, the first dated here)
  • Mar 28, 2025 PoC Published
  • Feb 23, 2026 CVE Updated
  • Mar 7, 2026 Distribution Patch (21 in total, the first dated here)
  • Mar 7, 2026 Security Advisory (27 in total, the first dated here)
  • Jul 29, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2021-3483
vulnetix vdb fixes CVE-2021-3483

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2021-3483/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›