CVE-2021-3483

HIGH
7.8
CVSS Score
Published: May 17, 2021 at 11:25 AM UTC
Updated: August 5, 2026 at 10:17 PM UTC
19 products affected across 3 vendorsLinux KernelDebian LinuxCloud Backup

Using kernel by N/A?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.4%

Description

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 4.4.265v < 5.124.10 ≤ v < 4.14.2294.15 ≤ v < 4.19.1854.20 ≤ v < 5.4.1104.5 ≤ v < 4.9.2655.11 ≤ v < 5.11.125.5 ≤ v < 5.10.284.104.154.204.55.115.12 rc15.12 rc25.12 rc35.12 rc45.12 rc55.5
Affected range stops below 4.14.229, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.19.185, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.4.265, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.9.265, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.10.28, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.11.12, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.12, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.4.110, so it looks safe — our inference, not a vendor statement
All versions
All versions
netapp-h300e (same device)
All versions
netapp-h300s (same device)
All versions
netapp-h410c (same device)
All versions
netapp-h410s (same device)
All versions
netapp-h500e (same device)
All versions
netapp-h500s (same device)
All versions
netapp-h700e (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (5)

Mailing Listx_refsource_MLISTPatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2021/04/07/1
x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1948045
Mailing Listx_refsource_MLISTThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Mailing Listx_refsource_MLISTThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card