PT-2021-6480
CVE-2021-4150
·
Published
2021-09-07
·
Updated
2023-08-14
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free flaw was found in the
add partition function in the Linux kernel, specifically in the block/partitions/core.c file. This issue can be exploited by a local attacker with user privileges to cause a denial of service on the system. The problem arises from the lack of proper code cleanup when the device add call fails during the addition of a partition to the disk.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾