CVE-2021-47123

HIGH

Linux Kernel 5.11 - Use-After-Free in io_uring Linked Timeout Completion

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix ltout double free on completion race Always remove linked timeout on io_link_timeout_fn() from the master request link list, otherwise we may get use-after-free when first io_link_timeout_fn() puts linked timeout in the fail path, and then will be found and put on master's free.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/1f64f5e903b9d1d157875721e02adadc9d6f0a5d

Patch

https://git.kernel.org/stable/c/447c19f3b5074409c794b350b10306e1da1ef4ba

Scores

CVSS v3 7.8

EPSS 0.0022

EPSS Percentile 12.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-415 CWE-416

Status published

Products (8)

Linux/Linux < 5.11

Linux/Linux 5.11

Linux/Linux 5.12.10 - 5.12.*

Linux/Linux 5.13

Linux/Linux 90cd7e424969d29aff653333b4dcb4e2e199d791 - 1f64f5e903b9d1d157875721e02adadc9d6f0a5d

Linux/Linux 90cd7e424969d29aff653333b4dcb4e2e199d791 - 447c19f3b5074409c794b350b10306e1da1ef4ba

linux/linux_kernel 5.13 rc1

linux/linux_kernel 5.11 - 5.12.10

Published Mar 15, 2024

Tracked Since Feb 18, 2026