WaratekVRT Sign in

CVE-2021-26708

Affected software5 products, listed below
Severity7.0 High CVSS 3.1 2 scores
WeaknessCWE-667
Published5 Feb 2021
Updated17 Jun 2026

Description

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

Exploitation status

Proof of concept only

A proof of concept exists, but no reviewed exploit catalogue lists this CVE.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment no assessment published
  • Indexed PoC 2 indexed Published artifacts you can open, in GitHub PoC; first seen 2021-02-15.
  • EPSS 1.6% chance in 30 days

1 of these are GitHub repositories with fewer than 5 stars. They are listed for reference and don't count toward the exploitation status above.

IndexArtifactStarsFirst seen
GitHub PoC Investigating the bug behind CVE-2021-26708 28 2021-02-15
GitHub PoC Automated reproduction and analysis of CVE-2021-26708 — a use-after-free vulnerability in the Linux kernel's AF_VSOCK subsystem (v5.10.12). Includes PoC exploit code, KASAN runtime detection report, and the full kernel build configuration for environment replication. Built with KernJC. 1 2026-08-07

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

7.0 HIGH v3.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 2 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 7.0 HIGH CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H NVD Primary published
CVSS 2.0 6.9 none AV:L/AC:M/Au:N/C:C/I:C/A:C NVD Primary

Affected software and releases

Products and versions

9 products, 9 version entries
SourceVendorProductSchemeAffected versions
nvd linux linux kernel generic ≥ 5.5 and ＜ 5.10.13
nvd netapp aff baseboard management controller generic any version
nvd netapp baseboard management controller 500f firmware generic ＜ 15.3
nvd netapp baseboard management controller a250 firmware generic ＜ 15.3
nvd netapp cloud backup generic any version
nvd netapp fas baseboard management controller generic any version
nvd netapp hci h410c firmware generic any version
nvd netapp solidfire \& hci management node generic any version
nvd netapp solidfire baseboard management controller generic any version

References

URLTags
http://www.openwall.com/lists/oss-security/2021/02/05/6 Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/04/09/2 Mailing List
http://www.openwall.com/lists/oss-security/2022/01/25/14 Mailing List
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13 Release Notes, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446 Patch, Vendor Advisory
https://security.netapp.com/advisory/ntap-20210312-0008/ Patch, Third Party Advisory
https://www.openwall.com/lists/oss-security/2021/02/04/5 Mailing List, Patch, Third Party Advisory

Timeline
Published2021-02-05By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.