CVE-2021-3348

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.10.12

Description The issue is related to a use-after-free in the ndb queue rq function in the Linux kernel, specifically in the drivers/block/nbd.c file. This could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, potentially allowing them to execute arbitrary code.

Recommendations For Linux kernel versions through 5.10.12, update to a version newer than 5.10.12 to resolve the issue. As a temporary workaround, consider restricting access to the nbd device to minimize the risk of exploitation.