A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.

🗓️ 26 Jan 2022 08:00:00Reported by MicrosoftType

A read-after-free race in Linux kernel Unix domain socket cleanup allows local users to crash or escalate privileges; pre five sixteen versions affected.

Reporter	Title	Published	Views	Family All 537
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes multiple vulnerable components.	5 Jul 202213:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	29 Jun 202223:37	–	ibm
IBM Security Bulletins	Security Bulletin: Linux Kernel vulnerability may affect IBM Elastic Storage System (CVE-2021-4083)	23 May 202212:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with multiple known vulnerabilities	23 Aug 202213:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect IBM Spectrum Copy Data Management	9 Jun 202217:51	–	ibm
ATTACKERKB	CVE-2021-4083	18 Jan 202217:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2022-1749)	7 Feb 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2022:1988)	12 May 202200:00	–	nessus
Tenable Nessus	CentOS 9 : kernel-5.14.0-347.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 7 : kpatch-patch (RHSA-2022:1185)	9 Oct 202400:00	–	nessus