Riskcovery

CVE-2021-28691

State
Published
Severity
Not scored
Published
Jun 29, 2021
Updated
Aug 3, 2024
Reserved
Mar 18, 2021

Read the record on cve.org

Description

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed, as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • before 4.12Unknown
  • 5.5.0 to before unspecifiedAffected
  • next of 5.12.2 to before unspecifiedNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.