vulnerability

Alma Linux: CVE-2021-4028: Important: kernel security and bug fix update (ALSA-2022-1550)

Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Apr 26, 2022
Added
May 4, 2022
Modified
Jan 30, 2025

Description

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.

Solution

alma-upgrade-kernel-tools-libs-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.