Use-after-free in Linux kernel - CVE-2021-3348

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU83433

Use-after-free in Linux kernel - CVE-2021-3348

Published: February 1, 2021 / Updated: November 22, 2023


Vulnerability identifier: #VU83433
CSH Severity: Low
CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-3348
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local authenticated user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nbd_add_socket in drivers/block/nbd.c. A local authenticated user can trigger a use-after-free error and escalate privileges on the system.


Affected software

Linux kernel
Amazon Linux AMI
Anolis OS
Red Hat Enterprise Linux for Real Time for NFV
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise Server
SUSE Linux Enterprise Software Development Kit
Ubuntu
openEuler
kgraft-patch-4_12_14-122_63-default
kernel-azure-debugsource
kernel-syms-azure
kernel-azure-devel
kernel-azure-debuginfo
kernel-azure-base-debuginfo
kernel-azure-base
kernel-azure
kernel-source-azure
kernel-devel-azure
gfs2-kmp-default
kernel-source
kernel-default-devel-debuginfo
kernel-default-man
kernel-default-kgraft
kernel-default-kgraft-devel
kernel-macros
cluster-md-kmp-default
cluster-md-kmp-default-debuginfo
dlm-kmp-default
dlm-kmp-default-debuginfo
kernel-default-base
gfs2-kmp-default-debuginfo
ocfs2-kmp-default
kernel-devel
kernel-syms
kernel-default-devel
kernel-default-base-debuginfo
kernel-default
kernel-docs
kernel-obs-build-debugsource
kernel-obs-build
kernel-default-extra-debuginfo
kernel-default-extra
kernel-default-debugsource
kernel-default-debuginfo
ocfs2-kmp-default-debuginfo
kernel
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-4.15.0-141-lowlatency (Ubuntu package)
linux-image-4.15.0-141-generic-lpae (Ubuntu package)
linux-image-4.15.0-141-generic (Ubuntu package)
linux-image-dell300x (Ubuntu package)
linux-image-4.15.0-1016-dell300x (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-4.15.0-1069-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1083-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.15.0-1089-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-4.15.0-1097-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1098-aws (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.15.0-1100-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-4.15.0-1112-azure (Ubuntu package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
bpftool
perf
python2-perf-debuginfo
kernel-tools-debuginfo
kernel-tools-devel
bpftool-debuginfo
python2-perf
python3-perf-debuginfo
perf-debuginfo
kernel-debuginfo
kernel-tools
kernel-debugsource
python3-perf
python-perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-headers
kernel-debug-devel
kernel-debug
linux-image-oem-osp1 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-5.4.0-71-generic-lpae (Ubuntu package)
linux-image-5.4.0-71-lowlatency (Ubuntu package)
linux-image-5.4.0-71-generic (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1013-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1033-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1037-kvm (Ubuntu package)
linux-image-5.4.0-1040-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1041-gcp (Ubuntu package)
linux-image-5.4.0-1042-oracle (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.4.0-1043-aws (Ubuntu package)
linux-image-5.4.0-1044-azure (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.8.0-49-lowlatency (Ubuntu package)
linux-image-5.8.0-49-generic (Ubuntu package)
linux-image-5.8.0-49-generic-64k (Ubuntu package)
linux-image-5.8.0-49-generic-lpae (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-5.8.0-1020-raspi (Ubuntu package)
linux-image-5.8.0-1020-raspi-nolpae (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1023-kvm (Ubuntu package)
linux-image-5.8.0-1025-oracle (Ubuntu package)
linux-image-5.8.0-1027-gcp (Ubuntu package)
linux-image-5.8.0-1027-azure (Ubuntu package)
linux-image-5.8.0-1028-aws (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-5.10.0-1017-oem (Ubuntu package)

How to mitigate CVE-2021-3348

Install update from vendor's website.

Linux kernel - update to 5.10.13
kgraft-patch-4_12_14-122_63-default - update to 1-8.3.1
kernel-azure-debugsource - update to 4.12.14-16.47.1
kernel-syms-azure - update to 4.12.14-16.47.1
kernel-azure-devel - update to 4.12.14-16.47.1
kernel-azure-debuginfo - update to 4.12.14-16.47.1
kernel-azure-base-debuginfo - update to 4.12.14-16.47.1
kernel-azure-base - update to 4.12.14-16.47.1
kernel-azure - update to 4.12.14-16.47.1
kernel-source-azure - update to 4.12.14-16.47.1
kernel-devel-azure - update to 4.12.14-16.47.1
gfs2-kmp-default - update to 4.12.14-122.63.1
kernel-source - update to 4.12.14-122.63.1
kernel-default-devel-debuginfo - update to 4.12.14-122.63.1
kernel-default-man - update to 4.12.14-122.63.1
kernel-default-kgraft - update to 4.12.14-122.63.1
kernel-default-kgraft-devel - update to 4.12.14-122.63.1
kernel-macros - update to 4.12.14-122.63.1
cluster-md-kmp-default - update to 4.12.14-122.63.1
cluster-md-kmp-default-debuginfo - update to 4.12.14-122.63.1
dlm-kmp-default - update to 4.12.14-122.63.1
dlm-kmp-default-debuginfo - update to 4.12.14-122.63.1
kernel-default-base - update to 4.12.14-122.63.1
gfs2-kmp-default-debuginfo - update to 4.12.14-122.63.1
ocfs2-kmp-default - update to 4.12.14-122.63.1
kernel-devel - update to 4.12.14-122.63.1
kernel-syms - update to 4.12.14-122.63.1
kernel-default-devel - update to 4.12.14-122.63.1
kernel-default-base-debuginfo - update to 4.12.14-122.63.1
kernel-default - update to 4.12.14-122.63.1
kernel-docs - update to 4.12.14-122.63.1
kernel-obs-build-debugsource - update to 4.12.14-122.63.1
kernel-obs-build - update to 4.12.14-122.63.1
kernel-default-extra-debuginfo - update to 4.12.14-122.63.1
kernel-default-extra - update to 4.12.14-122.63.1
kernel-default-debugsource - update to 4.12.14-122.63.1
kernel-default-debuginfo - update to 4.12.14-122.63.1
ocfs2-kmp-default-debuginfo - update to 4.12.14-122.63.1
kernel - update to 4.14.219-119.340
linux-image-virtual (Ubuntu package) - addressed in versions 4.15.0.141.128, 5.4.0.71.74, 5.8.0.49.54
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.15.0.141.128, 5.4.0.71.74, 5.8.0.49.54
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.141.128, 5.4.0.71.74, 5.8.0.49.54
linux-image-generic (Ubuntu package) - addressed in versions 4.15.0.141.128, 5.4.0.71.74, 5.8.0.49.54
linux-image-4.15.0-141-lowlatency (Ubuntu package) - update to 4.15.0-141.145
linux-image-4.15.0-141-generic-lpae (Ubuntu package) - update to 4.15.0-141.145
linux-image-4.15.0-141-generic (Ubuntu package) - update to 4.15.0-141.145
linux-image-dell300x (Ubuntu package) - update to 4.15.0.1016.18
linux-image-4.15.0-1016-dell300x (Ubuntu package) - update to 4.15.0-1016.20
linux-image-oracle (Ubuntu package) - addressed in versions 4.15.0.1069.57, 5.4.0.1042.39, 5.4.0.1042.45~18.04.24, 5.8.0.1025.24
linux-image-4.15.0-1069-oracle (Ubuntu package) - addressed in versions 4.15.0-1069.77, 4.15.0-1069.77~16.04.1
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1069.79
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.15.0.1083.80, 5.4.0.1033.68
linux-image-4.15.0-1083-raspi2 (Ubuntu package) - update to 4.15.0-1083.88
linux-image-kvm (Ubuntu package) - addressed in versions 4.15.0.1089.85, 5.4.0.1037.35, 5.8.0.1023.25
linux-image-4.15.0-1089-kvm (Ubuntu package) - update to 4.15.0-1089.91
linux-image-gcp (Ubuntu package) - addressed in versions 4.15.0.1097.98, 5.4.0.1041.28, 5.4.0.1041.50, 5.8.0.1027.27
linux-image-gke (Ubuntu package) - addressed in versions 4.15.0.1097.98, 5.8.0.1027.27
linux-image-4.15.0-1097-gcp (Ubuntu package) - addressed in versions 4.15.0-1097.110, 4.15.0-1097.110~16.04.1
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1097.115
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1098.91
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1098.101
linux-image-4.15.0-1098-aws (Ubuntu package) - update to 4.15.0-1098.105~16.04.1
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1100.103
linux-image-4.15.0-1100-snapdragon (Ubuntu package) - update to 4.15.0-1100.109
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1112.85
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1112.85, 4.15.0.1112.103, 5.4.0.1044.24, 5.4.0.1044.42, 5.8.0.1027.27
linux-image-4.15.0-1112-azure (Ubuntu package) - addressed in versions 4.15.0-1112.124~14.04.1, 4.15.0-1112.124~16.04.1, 4.15.0-1112.125
kernel (Red Hat package) - update to 4.18.0-348.el8
kernel-rt (Red Hat package) - update to 4.18.0-348.rt7.130.el8
bpftool - update to 4.19.90-2102.2.0.0057
perf - update to 4.19.90-2102.2.0.0057
kernel-source - update to 4.19.90-2102.2.0.0057
python2-perf-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-tools-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-devel - update to 4.19.90-2102.2.0.0057
kernel-tools-devel - update to 4.19.90-2102.2.0.0057
bpftool-debuginfo - update to 4.19.90-2102.2.0.0057
python2-perf - update to 4.19.90-2102.2.0.0057
python3-perf-debuginfo - update to 4.19.90-2102.2.0.0057
perf-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-tools - update to 4.19.90-2102.2.0.0057
kernel-debugsource - update to 4.19.90-2102.2.0.0057
python3-perf - update to 4.19.90-2102.2.0.0057
kernel - update to 4.19.90-2102.2.0.0057
python-perf - update to 4.19.91-26
perf - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
kernel-tools-libs - update to 4.19.91-26
kernel-tools - update to 4.19.91-26
kernel-headers - update to 4.19.91-26
kernel-devel - update to 4.19.91-26
kernel-debug-devel - update to 4.19.91-26
kernel-debug - update to 4.19.91-26
kernel - update to 4.19.91-26
bpftool - update to 4.19.91-26
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.71.74, 5.4.0.71.79~18.04.64
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.71.74, 5.4.0.71.79~18.04.64
linux-image-5.4.0-71-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-71.79, 5.4.0-71.79~18.04.1
linux-image-5.4.0-71-lowlatency (Ubuntu package) - addressed in versions 5.4.0-71.79, 5.4.0-71.79~18.04.1
linux-image-5.4.0-71-generic (Ubuntu package) - addressed in versions 5.4.0-71.79, 5.4.0-71.79~18.04.1
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.71.79~18.04.64
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.71.79~18.04.64
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.71.79~18.04.64
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.71.79~18.04.64
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.71.79~18.04.64
linux-image-5.4.0-1013-gkeop (Ubuntu package) - addressed in versions 5.4.0-1013.14, 5.4.0-1013.14~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1013.14~18.04.14, 5.4.0.1013.16
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1013.16
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1033.35
linux-image-5.4.0-1033-raspi (Ubuntu package) - addressed in versions 5.4.0-1033.36, 5.4.0-1033.36~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1033.68, 5.8.0.1020.23
linux-image-5.4.0-1037-kvm (Ubuntu package) - update to 5.4.0-1037.38
linux-image-5.4.0-1040-gke (Ubuntu package) - update to 5.4.0-1040.42~18.04.1
linux-image-gke-5.4 (Ubuntu package) - update to 5.4.0.1040.42~18.04.7
linux-image-5.4.0-1041-gcp (Ubuntu package) - addressed in versions 5.4.0-1041.44, 5.4.0-1041.44~18.04.1
linux-image-5.4.0-1042-oracle (Ubuntu package) - addressed in versions 5.4.0-1042.45, 5.4.0-1042.45~18.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1043.26, 5.4.0.1043.44, 5.8.0.1028.30
linux-image-5.4.0-1043-aws (Ubuntu package) - addressed in versions 5.4.0-1043.45, 5.4.0-1043.45~18.04.1
linux-image-5.4.0-1044-azure (Ubuntu package) - addressed in versions 5.4.0-1044.46, 5.4.0-1044.46~18.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.8.0.49.54
linux-image-generic-64k (Ubuntu package) - update to 5.8.0.49.54
linux-image-5.8.0-49-lowlatency (Ubuntu package) - update to 5.8.0-49.55~20.04.1
linux-image-5.8.0-49-generic (Ubuntu package) - update to 5.8.0-49.55~20.04.1
linux-image-5.8.0-49-generic-64k (Ubuntu package) - update to 5.8.0-49.55~20.04.1
linux-image-5.8.0-49-generic-lpae (Ubuntu package) - update to 5.8.0-49.55~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.8.0.49.55~20.04.33
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.8.0.49.55~20.04.33
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.8.0.49.55~20.04.33
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.8.0.49.55~20.04.33
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.8.0.49.55~20.04.33
linux-image-5.8.0-1020-raspi (Ubuntu package) - update to 5.8.0-1020.23
linux-image-5.8.0-1020-raspi-nolpae (Ubuntu package) - update to 5.8.0-1020.23
linux-image-raspi-nolpae (Ubuntu package) - update to 5.8.0.1020.23
linux-image-5.8.0-1023-kvm (Ubuntu package) - update to 5.8.0-1023.25
linux-image-5.8.0-1025-oracle (Ubuntu package) - update to 5.8.0-1025.26
linux-image-5.8.0-1027-gcp (Ubuntu package) - update to 5.8.0-1027.28
linux-image-5.8.0-1027-azure (Ubuntu package) - update to 5.8.0-1027.29
linux-image-5.8.0-1028-aws (Ubuntu package) - update to 5.8.0-1028.30
linux-image-oem-20.04b (Ubuntu package) - update to 5.10.0.1017.18
linux-image-5.10.0-1017-oem (Ubuntu package) - update to 5.10.0-1017.18

External References

Related Security Bulletins