CVE-2021-36145

HIGH

ACRN < 2.5 - Use-After-Free in Device Model Memory Management

Title source: llm

The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.

Core 1

Core References

Patch, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0096

EPSS Percentile 57.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-416

Status published

Products (1)

linux/acrn < 2.5

Published Jul 02, 2021

Tracked Since Feb 18, 2026