CVE-2021-3759

תיאור (מקור, אנגלית)

A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-14/10/2026

CWE

CWE-400, CWE-770

מוצרים מושפעים

linux: linux kernel; debian: debian linux

קישורים

• https://access.redhat.com/security/cve/CVE-2021-3759 Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1999675 Issue TrackingThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html Mailing ListThird Party Advisory
• https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive%40gm‮…
• https://access.redhat.com/security/cve/CVE-2021-3759 Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1999675 Issue TrackingThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html Mailing ListThird Party Advisory
• https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive%40gm‮…
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html