CVE-2021-4028

CVE-2021-4028 is a use-after-free vulnerability in the Linux kernel's RDMA communications manager listener code, affecting various Linux distributions including Linux Enterprise and SUSE Linux Enterprise. A local attacker can exploit this flaw by setting up a socket on a high port, potentially leading to a system crash or privilege escalation. With a CVSS score of 7.8 (High), this vulnerability has low attack complexity and requires local access, but can result in high impact to confidentiality, integrity, and availability. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), it is not listed in CISA's KEV catalog, and there is no evidence of active exploitation or significant community discussion.