CVE detail
CVE-2021-44733
A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 16.0 · KEV 0.0 · OTX 0.0 · PoC 4.5
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
7 source links · newest first
- https://www.debian.org/security/2022/dsa-5096www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgDec 22, 2021, 5:15 PM - https://security.netapp.com/advisory/ntap-20220114-0003/security.netapp.com
No excerpt available.
Exploitsecurity.netapp.comDec 22, 2021, 5:15 PM No excerpt available.
Vendor Advisorylore.kernel.orgDec 22, 2021, 5:15 PMNo excerpt available.
Vendor Advisorylists.debian.orgDec 22, 2021, 5:15 PMNo excerpt available.
Exploitgithub.comDec 22, 2021, 5:15 PM- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/tee/tee_shm.cgit.kernel.org
No excerpt available.
Exploitgit.kernel.orgDec 22, 2021, 5:15 PM - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dfd0743f1d9ea76931510ed150334d571fbab49dgit.kernel.org
No excerpt available.
Exploitgit.kernel.orgDec 22, 2021, 5:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
1 repository references · best confidence 0.90 · max 0 stars
- pjlantz/optee-qemuHigh confidencegithubNVD Exploit reference0 starsDiscovered Aug 5, 2026, 9:10 PM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2021-3752CVSS 7.1 · High
A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This f…
- CVE-2022-1048CVSS 7.0 · High
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition ha…
- CVE-2022-28796CVSS 7.0 · High
jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.
- CVE-2021-3640CVSS 7.0 · High
A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of…
- CVE-2021-40490CVSS 7.0 · High
A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
- CVE-2021-23133CVSS 6.7 · Medium
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged…