The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value. CREATE(Triage):(User=admin) CVE-2021-33033 (https://nvd.nist.gov/vuln/detail/CVE-2021-33033)
