What is CVE-2021-47616?

CVE-2021-47616 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2024-06-19.

How severe is CVE-2021-47616?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Linux

CVE-2021-47616

In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxe_queue_cleanup On error handling path in rxe_qp_from_init() qp->sq.queue is freed and then rxe_create_qp() will drop last reference to this object. qp clean up function will try to free this queue one time and it causes UAF bug. Fix it by zeroing queue pointer after freeing queue in rxe_qp_from_init().

Vulnerability class: Use-After-Free

EPSS: 0.002 (12.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 514aee660df493cd673154a6ba6bab745ec47b8c, 5.15, 0
Linux Linux_kernel

Weakness classification (CWE)

CWE-416 — Use After Free

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2021-47616?: CVE-2021-47616 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2024-06-19.
How severe is CVE-2021-47616?: High severity. CVSS v3 base score is 7.8 out of 10.