SUSE CVE-2021-29266

An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v-configctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0...

The vulnerability in the implementation of the vhost_vdpa_config_put() function in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the vhostvdpaconfigput function in Linux kernel relates to an unacceptable value of v-configctx when a symbolic device is reopened. Exploiting this vulnerability could allow an attacker to cause service failures...

An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device aka CID-f6bbf0010ba0.

...