vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2021-4083

HIGH
7
CVSS Score
Published: January 18, 2022 at 04:51 PM UTC
Updated: June 17, 2026 at 04:19 AM UTC
24 products affected across 5 vendorsLinux KernelDebian LinuxH700S Firmware

Using kernel by N/A?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7
Exploit prediction
EPSS 0.3%

Description

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux· Debiandrupal
95%
10.09.0
Linux Kernel· Linux
95%
v < 4.4.2944.10 ≤ v < 4.14.2574.15 ≤ v < 4.19.2204.20 ≤ v < 5.4.1644.5 ≤ v < 4.9.2925.11 ≤ v < 5.15.75.5.0 ≤ v < 5.10.845.16 rc15.16 rc25.16 rc3
Affected range stops below 4.14.257, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.19.220, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.4.294, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.9.292, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.10.84, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.15.7, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.4.164, so it looks safe — our inference, not a vendor statement
H300E Firmware· NetAppdrupal
95%
All versions
netapp-h300e (same device)
H300S Firmware· NetAppdrupal
95%
All versions
netapp-h300s (same device)
H410C Firmware· NetAppdrupal
95%
All versions
netapp-h410c (same device)
H410S Firmware· NetAppdrupal
95%
All versions
netapp-h410s (same device)
H500E Firmware· NetAppdrupal
95%
All versions
netapp-h500e (same device)
H500S Firmware· NetAppdrupal
95%
All versions
netapp-h500s (same device)
H700E Firmware· NetAppdrupal
95%
All versions
netapp-h700e (same device)
H700S Firmware· NetAppdrupal
95%
All versions
netapp-h700s (same device)

References (7)

x_refsource_MISCIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=2029923
x_refsource_MISCMailing ListPatch
Source: [email protected]
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9
Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html
Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://security.netapp.com/advisory/ntap-20220217-0005/
Vendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
https://www.debian.org/security/2022/dsa-5096
x_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://www.oracle.com/security-alerts/cpujul2022.html

CVSS

7HIGH[email protected]
Attack Vector
LOCAL
Complexity
HIGH
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416CWE-362

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card