PT-2021-1506 · Linux+7 · Linux Kernel+7

Marcus Meissner · Published 2021-01-28 · Updated 2026-02-25 · CVE-2021-3347

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.10.11

Description: An issue in the Linux kernel allows local users to execute code in the kernel due to a use-after-free in PI futexes during fault handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations: For Linux kernel versions through 5.10.11, update to a version later than 5.10.11 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2021:1093

ALT-PU-2021-1188

ALT-PU-2021-1190

ALT-PU-2021-1213

ALT-PU-2021-1296

ALT-PU-2021-1417

ALT-PU-2021-1424

ALT-PU-2021-1446

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

ASB-A-171705902

BDU:2021-02593

CESA-2021_1081

CESA-2021_1093

CESA-2021_2314

CVE-2021-3347

DLA-2557-1

DLA-2586-1

DSA-4843-1

MGASA-2021-0061

MGASA-2021-0062

OESA-2021-1086

OESA-2021-1087

OPENSUSE-SU-2021:0241-1

OPENSUSE-SU-2021_0241-1

RHSA-2021:1081

RHSA-2021:1093

RHSA-2021:1272

RHSA-2021:1279

RHSA-2021:1295

RHSA-2021:1379

RHSA-2021:2099

RHSA-2021:2106

RHSA-2021:2285

RHSA-2021:2314

RHSA-2021:2316

RHSA-2021:2730

RHSA-2021:2731

RHSA-2021:2732

RHSA-2021:2733

RHSA-2021:2735

RHSA-2021:3399

RHSA-2021:3522

RHSA-2021:3523

RHSA-2021_1081

RHSA-2021_1093

RHSA-2021_2314

RHSA-2021_2316

RHSA-2021_2735

SUSE-SU-2021:0347-1

SUSE-SU-2021:0348-1

SUSE-SU-2021:0353-1

SUSE-SU-2021:0354-1

SUSE-SU-2021:0427-1

SUSE-SU-2021:0433-1

SUSE-SU-2021:0434-1

SUSE-SU-2021:0437-1

SUSE-SU-2021:0438-1

SUSE-SU-2021:0452-1

SUSE-SU-2021:0532-1

SUSE-SU-2021:0809-1

SUSE-SU-2021:0818-1

SUSE-SU-2021:0823-1

SUSE-SU-2021:0826-1

SUSE-SU-2021:0840-1

SUSE-SU-2021:0841-1

SUSE-SU-2021:0842-1

SUSE-SU-2021:0849-1

SUSE-SU-2021:0853-1

SUSE-SU-2021:0859-1

SUSE-SU-2021:0868-1

SUSE-SU-2021:0870-1

SUSE-SU-2021:14630-1

SUSE-SU-2021_14630-1

USN-4878-1

USN-4884-1

USN-4907-1

USN-4910-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 434

• 🔥 http://openwall.com/lists/oss-security/2021/02/01/4 · Exploit
• https://ubuntu.com/security/CVE-2020-36158 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c64396cc36c6e60704ab06c1fb1c4a46179c9120 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXAVDAK4RLAHBHHGEPL73UFXSI6BXQ7Q · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3178 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-171705902 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3347 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25220 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0353-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0347-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3347 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4884-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9086.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0870-1 · Vendor Advisory