CVE-2021-26708

Published: Feb 5, 2021Modified: Jun 17, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

Affected (9)

Products: Linux: Linux Kernel · Netapp: Aff Baseboard Management Controller, Cloud Backup, Fas Baseboard Management Controller, Solidfire & Hci Management Node, Solidfire Baseboard Management Controller, Baseboard Management Controller 500f Firmware, Baseboard Management Controller A250 Firmware, Hci H410c Firmware

1 product

8 products

Aff Baseboard Management Controller

Fas Baseboard Management Controller

Solidfire & Hci Management Node

Solidfire Baseboard Management Controller

Baseboard Management Controller 500f Firmware

Baseboard Management Controller A250 Firmware

Hci H410c Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.5 to 5.10.13

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Aff Baseboard Management Controller	All versions
Netapp Cloud Backup	All versions
Netapp Fas Baseboard Management Controller	All versions
Netapp Solidfire & Hci Management Node	All versions
Netapp Solidfire Baseboard Management Controller	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Baseboard Management Controller 500f Firmware	Before 15.3

Running on/with	Platform Versions
Netapp 500f	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Baseboard Management Controller A250 Firmware	Before 15.3

Running on/with	Platform Versions
Netapp A250	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Hci H410c Firmware	All versions

Running on/with	Platform Versions
Netapp Hci H410c	All versions

Related CWEs

Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (14)

http://www.openwall.com/lists/oss-security/2021/02/05/6

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/09/2

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2022/01/25/14

Source: cve@mitre.org

Mailing List

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13

Source: cve@mitre.org

Release NotesVendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446

Source: cve@mitre.org

PatchVendor Advisory

https://security.netapp.com/advisory/ntap-20210312-0008/

Source: cve@mitre.org

PatchThird Party Advisory

https://www.openwall.com/lists/oss-security/2021/02/04/5

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/02/05/6

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/09/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2022/01/25/14

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://security.netapp.com/advisory/ntap-20210312-0008/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.openwall.com/lists/oss-security/2021/02/04/5

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

Timeline

No history available yet.