CVE-2021-29266

2021-03-26T00:00:00
ID UB:CVE-2021-29266
Type ubuntucve
Reporter ubuntu.com
Modified 2021-03-26T00:00:00

Description

An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0.

Notes

Author| Note
---|---
sbeattie | likely requires write access to /dev/virtio-vdpa-* devices