60
CVE-2021-26708
—CVSS 3.1
7.0 high
EPSS
2%p74
Published
()
Modified
Description
A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.
- Vendors
- linuxnetapp
- Products
- linux kernel, aff baseboard management controller, cloud backup, fas baseboard management controller, solidfire \& hci management node, solidfire baseboard management controller, baseboard management controller 500f firmware, baseboard management controller a250 firmware, hci h410c firmware
- Weakness
- CWE-667
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H