What is CVE-2021-3715?

CVE-2021-3715 is a high-severity vulnerability in Linux Kernel, classified under Use After Free. CVSS score: 7.8/10. Published 2022-03-02.

How severe is CVE-2021-3715?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2021-3715 known to be exploited?

23 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Use After Free in Linux Kernel

CVE-2021-3715

A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Vulnerability class: Use-After-Free

EPSS: 0.004 (28.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux Linux_kernel
N/a Kernel — versions Linux kernel 5.10

Weakness classification (CWE)

CWE-416 — Use After Free

Public proof-of-concept exploits

References

secalert@redhat.com (Patch, Mailing List, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-3715?: CVE-2021-3715 is a high-severity vulnerability in Linux Kernel, classified under Use After Free. CVSS score: 7.8/10. Published 2022-03-02.
How severe is CVE-2021-3715?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2021-3715 known to be exploited?: 23 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.