CVE-2021-43412

CVE-2021-43412 is a high-severity vulnerability affecting GNU Hurd versions prior to 0.9 20210404-9. It stems from libports accepting fake notification messages, leading to a use-after-free condition (CWE-416). This flaw can be exploited locally for privilege escalation, potentially granting full root access. The CVSSv3.1 score is 7.8 (High), indicating a low attack complexity and no user interaction required for a local attacker to achieve high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.