What’s Vulnerable › Vulnerabilities

CVE-2021-4028

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-24 · updated 2026-06-17
• Weakness: CWE-416

Description

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.

Affected products

• Linux kernel: from 5.10 before 5.10.71; from 5.11 before 5.14.10 — fixed in 5.10.71, 5.14.10
• SUSE Linux Enterprise: 15.0-sp3, 15.0-sp4

How to fix

Upgrade to a fixed version: Linux kernel 5.10.71, 5.14.10. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/security/cve/CVE-2021-4028
• https://bugzilla.redhat.com/show_bug.cgi?id=2027201
• https://bugzilla.suse.com/show_bug.cgi?id=1193167#c0
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc0bdc5afaa74
• https://lkml.org/lkml/2021/10/4/697
• https://security.netapp.com/advisory/ntap-20221228-0002/
• https://access.redhat.com/security/cve/CVE-2021-4028
• https://bugzilla.redhat.com/show_bug.cgi?id=2027201
• https://bugzilla.suse.com/show_bug.cgi?id=1193167#c0
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc0bdc5afaa74
• https://lkml.org/lkml/2021/10/4/697
• https://security.netapp.com/advisory/ntap-20221228-0002/

Get alerted when CVE-2021-4028 or the next vulnerability affects your stack