CVE-2021-3347
HIGH 7.8EPSS 1.4%
An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 1.36% chance of exploitation in the next 30 days, 71st percentile
- Published
- 2021-01-29
- Updated
- 2026-02-25
Proof-of-concept exploits (1)
- nanopathi/linux-4.19.72_CVE-2021-33470★ · 2023-10-26
Security advisories
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04b79c55201…
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12bb3f7f1b0…
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2156ac19341…
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34b1a1ce145…
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6ccc84f917d…
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5cade200ab…
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c64396cc36c…
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2dac39d939…
- http://www.openwall.com/lists/oss-security/2021/01/29/4
- http://www.openwall.com/lists/oss-security/2021/01/29/5
- http://www.openwall.com/lists/oss-security/2021/02/01/4
- https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
- https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
- https://security.netapp.com/advisory/ntap-20210304-0005
- https://www.debian.org/security/2021/dsa-4843
- https://www.openwall.com/lists/oss-security/2021/01/29/1
- https://www.openwall.com/lists/oss-security/2021/01/29/3