CVE-2021-29266 log

Source
Severity Medium
Remote No
Type Denial of service
Description
An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0.
Group Package Affected Fixed Severity Status Ticket
AVG-1719 linux-lts 5.10.25-1 5.10.26-1 Medium Fixed
AVG-1718 linux-zen 5.11.8.zen1-1 5.11.9.zen1-1 Medium Fixed
AVG-1717 linux-hardened 5.11.8.hardened1-1 5.11.9.hardened1-1 Medium Fixed
AVG-1716 linux 5.11.8.arch1-1 5.11.9.arch1-1 Medium Fixed
References
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.11.9&id=873c8f1654f5da2c70f8616850e019c30f471ff7
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.26&id=49ca3100fbaf864853c922c8f7a8fe7090a83860