VDB

CVE-2021-43057

CVE-2021-43057 PUBLISHED CVSS 7.199999809265137 HIGH

An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) could be used by local attackers to cause memory corruption and escalate privileges, aka CID-a3727a8bac0a. This occurs because of an attempt to access the subjective credentials of another task.

EPSS 0.15% · 34.9th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.15%
34.9th percentile

Affected Products

VendorProductVersions
netapph300s_firmware
netapph410s_firmware
n/an/a*
netapph300e_firmware
netapph700e_firmware
netapph410c_firmware
linuxlinux_kernel5.13
netapph700s_firmware
netapph500e_firmware
netapph500s_firmware

Timeline

  • Oct 28, 2021 EPSS Score
  • Oct 28, 2021 CVE Published
  • Dec 23, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 17, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jun 9, 2022 EPSS Score
  • Aug 5, 2022 EPSS Score
  • Sep 30, 2022 EPSS Score
  • Nov 25, 2022 EPSS Score
  • Jan 19, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›