VULNERABILITY INTELLIGENCE

CVE-2021-47470

CVSS score7.8 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2024-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential use-after-free in slab_debugfs_fops When sysfs_slab_add failed, we shouldn't call debugfs_slab_add() for s because s will be freed soon. And slab_debugfs_fops will use s later leading to a use-after-free.

Weakness classification

  • CWE-416: Use After Free

Primary references