Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7hqh-xccf-8jp4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.

EPSS

Процентиль: 27%
0.00094
Низкий

7 High

CVSS3

Дефекты

CWE-362
CWE-416

Связанные уязвимости

CVSS3: 7
ubuntu
больше 4 лет назад

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.

CVSS3: 7
redhat
больше 4 лет назад

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.

CVSS3: 7
nvd
больше 4 лет назад

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.

CVSS3: 7
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 7
debian
больше 4 лет назад

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10 ...

EPSS

Процентиль: 27%
0.00094
Низкий

7 High

CVSS3

Дефекты

CWE-362
CWE-416