CVE-2021-30573: 
vulnerability analysis and mitigation

CVE-2021-30573 is a use-after-free vulnerability discovered in the GPU component of Google Chrome versions prior to 92.0.4515.107. The vulnerability was disclosed on August 3, 2021, and affects the browser's GPU handling functionality (NVD, Chrome Blog).

The vulnerability is classified as a use-after-free bug in the GPU component of Chrome. It has been assigned a CVSS v3.1 base score of 8.8 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability requires user interaction and can be exploited remotely through a crafted HTML page (NVD).

If successfully exploited, this vulnerability could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page, potentially leading to arbitrary code execution within the context of the browser (NVD).

Google has addressed this vulnerability in Chrome version 92.0.4515.107. Users are advised to update to this version or later to mitigate the risk. The fix has also been incorporated into various Linux distributions including Fedora 33, 34, and 35 through their respective security updates (Chrome Blog, Fedora).