Vulnerability CVE-2021-3348

Vulnerability Name:

CVE-2021-3348 (CCN-195780)

Assigned:

2021-01-28

Published:

2021-01-28

Updated:

2022-04-26

Summary:

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.

CVSS v3 Severity:

7.0 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.1 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

7.0 High (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.1 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

4.4 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-362
CWE-416
CWE-416

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2021-3348

Source: MLIST
Type: Mailing List, Patch, Third Party Advisory
[oss-security] 20210201 Re: Re: Linux kernel: linux-block: nbd: use-after-free Read in nbd_queue_rq

Source: XF
Type: UNKNOWN
linux-kernel-cve20213348-info-disc(195780)

Source: CCN
Type: Linux Kernel GIT Repository
nbd: freeze the queue while we're adding connections

Source: MISC
Type: Mailing List, Patch, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b98e762e3d71e893b221f871825dc64694cfb258

Source: MLIST
Type: Third Party Advisory
[debian-lts-announce] 20210330 [SECURITY] [DLA 2610-1] linux-4.19 security update

Source: CCN
Type: Linux Kernel Web site
[PATCH] nbd: freeze the queue while we're adding connections

Source: CCN
Type: oss-sec Mailing List, Fri, 29 Jan 2021 02:10:20 +0800
Linux kernel: linux-block: nbd: use-after-free Read in nbd_queue_rq

Source: CCN
Type: oss-sec Mailing List, Sat, 30 Jan 2021 16:46:30 +0800
Re: Linux kernel: linux-block: nbd: use-after-free Read in nbd_queue_rq

Source: CCN
Type: oss-sec Mailing List, Mon, 1 Feb 2021 07:43:44 +0100
Re: Re: Linux kernel: linux-block: nbd: use-after-free Read in nbd_queue_rq

Source: MISC
Type: Mailing List, Patch, Third Party Advisory
https://www.openwall.com/lists/oss-security/2021/01/28/3

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2021-3348

Vulnerable Configuration:

Configuration 1:

cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:* (Version <= 5.10.12)

Configuration 2:

cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:enterprise_linux:8::nfv:*:*:*:*:*

Configuration RedHat 3:

cpe:/a:redhat:enterprise_linux:8::realtime:*:*:*:*:*

Configuration RedHat 4:

cpe:/a:redhat:enterprise_linux:8::crb:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:8::baseos:*:*:*:*:*

Configuration CCN 1:

cpe:/o:linux:linux_kernel:5.10:-:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8029	P	kernel-docs-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:7713	P	log4j-2.17.2-150200.4.24.13 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7539	P	kernel-64kb-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7576	P	libblkid-devel-2.37.4-150500.7.16 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:8090	P	reiserfs-kmp-default-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:52003	P	Security update for libksba (Moderate)	2023-01-09
oval:org.opensuse.security:def:665	P	Security update for samba (Moderate)	2022-08-03
oval:org.opensuse.security:def:93154	P	(Important)	2022-07-12
oval:org.opensuse.security:def:93307	P	(Important)	2022-07-06
oval:org.opensuse.security:def:3398	P	wpa_supplicant-2.6-15.10.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3448	P	busybox-1.21.1-3.3 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3453	P	clamav-0.101.3-1.19 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3516	P	gtk2-data-2.24.31-9.6.28 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3567	P	libXtst6-1.2.2-7.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95412	P	Security update for rubygem-rack (Critical)	2022-06-27
oval:org.opensuse.security:def:95083	P	kernel-azure-5.14.21-150400.12.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94590	P	kernel-64kb-5.14.21-150400.22.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95197	P	kernel-default-extra-5.14.21-150400.22.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95028	P	kernel-docs-5.14.21-150400.22.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94628	P	libcaca-devel-0.99.beta19.git20171003-150200.11.6.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95078	P	reiserfs-kmp-default-5.14.21-150400.22.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:2960	P	kernel-64kb-5.14.21-150400.22.1 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94925	P	libXcursor1-32bit-1.1.15-1.18 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:89	P	kernel-64kb-5.3.18-57.3 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:95423	P	Security update for MozillaThunderbird (Important)	2022-06-13
oval:org.opensuse.security:def:100104	P	(Important)	2022-03-24
oval:org.opensuse.security:def:101638	P	Security update for xerces-j2 (Important)	2022-02-18
oval:org.opensuse.security:def:99199	P	(Moderate)	2022-01-20
oval:org.opensuse.security:def:102125	P	Security update for the Linux Kernel (Important)	2022-01-11
oval:org.opensuse.security:def:4516	P	Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP5) (Important)	2021-11-17
oval:org.opensuse.security:def:102299	P	Security update for the Linux Kernel (Important)	2021-11-11
oval:com.redhat.rhsa:def:20214140	P	RHSA-2021:4140: kernel-rt security and bug fix update (Moderate)	2021-11-09
oval:com.redhat.rhsa:def:20214356	P	RHSA-2021:4356: kernel security, bug fix, and enhancement update (Moderate)	2021-11-09
oval:org.opensuse.security:def:102136	P	Security update for python (Moderate)	2021-10-20
oval:org.opensuse.security:def:5875	P	Security update for libvirt (Moderate)	2021-10-04
oval:org.opensuse.security:def:5864	P	Security update for ghostscript (Critical)	2021-09-21
oval:org.opensuse.security:def:63125	P	kernel-azure-5.3.18-36.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2013	P	reiserfs-kmp-default-5.3.18-57.3 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2036	P	kernel-azure-5.3.18-36.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63102	P	reiserfs-kmp-default-5.3.18-57.3 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:101341	P	apache2-mod_apparmor-2.13.6-1.31 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:72738	P	kernel-docs-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62107	P	kernel-64kb-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:63019	P	kernel-docs-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1018	P	kernel-64kb-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100865	P	kernel-64kb-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:1930	P	kernel-docs-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:71848	P	kernel-64kb-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101277	P	kernel-docs-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:99394	P	(Important)	2021-07-12
oval:org.opensuse.security:def:20575	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:5193	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:35288	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:60472	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:19622	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:6318	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:4290	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:60473	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:34649	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:26206	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:61111	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:34650	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:99593	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:68102	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:105196	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:91886	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:99004	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:92643	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:10394	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:70534	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:99792	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:7013	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:92054	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:9644	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:69784	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:92842	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:8893	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:98506	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:92249	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:9843	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:69983	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:8330	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:93001	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:91541	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:9088	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:98836	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:97227	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:92444	P	Security update for the Linux Kernel (Important)	2021-02-19
oval:org.opensuse.security:def:10198	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:70338	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:89240	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:6727	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:59843	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:127213	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:33762	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:19571	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:9444	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:69584	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:125331	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:21843	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:8697	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:89498	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:34020	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:8263	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:88241	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:125648	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:24015	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:97214	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:20324	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:67816	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:88558	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:59585	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:126816	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:4731	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:125103	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:118435	P	Security update for the Linux Kernel (Important)	2021-02-10
oval:org.opensuse.security:def:109344	P	Security update for the Linux Kernel (Important)	2021-02-10
oval:org.opensuse.security:def:95965	P	Security update for the Linux Kernel (Important)	2021-02-10
oval:org.opensuse.security:def:102678	P	Security update for the Linux Kernel (Important)	2021-02-10
oval:org.opensuse.security:def:68802	P	Security update for the Linux Kernel (Important)	2021-02-10
oval:org.opensuse.security:def:117818	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:109287	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:8372	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:95761	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:97175	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:102872	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:108802	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:66964	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:96326	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:76032	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:102474	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:117888	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:68284	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:108007	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:64605	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:95908	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:97177	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:102998	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:73727	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:118634	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:108965	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:67548	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:102621	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:10664	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:70804	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:118063	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:109538	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:68665	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:108304	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:7195	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:65605	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:74673	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:119804	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:117521	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:109140	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:6459	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:95586	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:118373	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:109664	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:108791	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:66953	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:96182	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:76021	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:111205	P	Security update for the Linux Kernel (Important)	2021-02-05

BACK