#VU104498 Use-after-free in Linux kernel - CVE-2021-47651

Vulnerability identifier: #VU104498

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47651

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the rpmpd_probe() function in drivers/soc/qcom/rpmpd.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/31b5124d742969ea8bf7a1360596f548ca23e770
https://git.kernel.org/stable/c/5a811126d38f9767a20cc271b34db7c8efc5a46c
https://git.kernel.org/stable/c/724376c30af5a57686b223dbcd6188e07d2a1de2
https://git.kernel.org/stable/c/755dbc3d73789ac9f0017c729abf5e4b153bf799
https://git.kernel.org/stable/c/84b89fa877ad576e9ee8130f412cfd592f274508
https://git.kernel.org/stable/c/b5d6eba71997b6d661935d2b15094ac7f9f6132d

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.