PT-2021-8141 · Linux+3 · Linux Kernel+3
Wu Bo
·
Published
2021-12-21
·
Updated
2025-06-18
·
CVE-2021-47100
CVSS v2.0
6.2
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 4.18.0.x86 64 #46 and #47
Description
The vulnerability in the Linux kernel is related to a use-after-free (UAF) issue when uninstalling the ipmi si and ipmi msghandler modules. This can cause the system to crash. The issue arises from the sequence of events involving the removal of these modules, specifically through the functions ipmi unregister smi(), ipmi bmc unregister(), and the scheduling of work for the removal of the BMC device. The vulnerability can potentially be exploited to elevate privileges in the system.
Recommendations
To resolve this issue, ensure that your Linux kernel is updated to a version that includes the fix for this vulnerability. Specifically, for versions 4.18.0.x86 64 #46 and #47, update to a newer version of the Linux kernel where this issue has been addressed. If you are using a version prior to the fixed version, consider temporarily disabling the use of the ipmi si and ipmi msghandler modules until an update can be applied.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse