CVE-2021-3483

2021-05-1711:25:12

CWE-416

redhat

www.cve.org

flaw

nosy driver

device insertion

use-after-free

vulnerability

confidentiality

integrity

system availability

kernel 5.12-rc6

AI Score

Confidence

High

EPSS

Percentile

14.2%

JSON

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "kernel 5.12-rc6"
      }
    ]
  }
]