VULNERABILITY INTELLIGENCE

CVE-2021-3483

CVSS score7.8 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2021-05-17
Last modified2026-08-05
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected

Weakness classification

  • secalert@redhat.com: CWE-416

Primary references