CVE-2021-4028: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.

Affected products

• Linux Linux Kernel: from 5.10, before 5.10.71 (fixed in 5.10.71); from 5.11, before 5.14.10 (fixed in 5.14.10)
• Suse Linux Enterprise: version 15.0 only

Published 2022-08-24. Last modified 2026-06-17.