CVE-2021-24107

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description An information disclosure flaw exists in Event Tracing for Windows (ETW), a system that supports most Windows security tooling. The issue occurs because a kernel pointer is returned to usermode callers. Although an attempt was made to zero out the pointer, only a 4-byte write was performed instead of clearing the full 8-byte value, leaving the upper half of the kernel address intact and leakable. This allows attackers to obtain sensitive information and affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.