AVG-1556 log

Package linux-zen
Status Not affected
Severity Medium
Type privilege escalation
Affected 5.9.14.zen1-1
Fixed 5.10.1.zen1-1
Current 6.12.zen1-1 [extra-testing]
6.11.9.zen1-1 [extra]
Ticket None
Created Wed Feb 10 05:39:22 2021
Issue Severity Remote Type Description
CVE-2021-20226 Medium No Privilege escalation
An inappropriate handling of descriptors that results in a use-after- free vulnerability was found on the Linux kernel before version 5.10.
References
https://bugzilla.redhat.com/show_bug.cgi?id=1873476
https://seclists.org/oss-sec/2021/q1/111
https://www.zerodayinitiative.com/advisories/ZDI-21-001/
https://access.redhat.com/security/cve/CVE-2021-20226
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20226
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=233295130e53c8dfe6dbef3f52634c3f7e44cd6a