← Database

CVE-2021-4203

MEDIUM CVSS: 6.8 Published: 2022-03-25 Modified: 2026-06-17

Description

A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.

Affected Platforms

Netapp SolidfireNetapp A700S FirmwareNetapp Hci Management NodeNetapp H300S FirmwareNetapp Hci Compute NodeLinux Linux KernelNetapp H700SOracle Communications Cloud Native Core Network Exposure FunctionOracle Communications Cloud Native Core Binding Support FunctionNetapp H410S

Weakness Type

CWE-362, CWE-362, CWE-416

References