PT-2019-6417 · Openeuler+2 · Openeuler Kernel+2

Vinicius Costa Gomes · Published 2019-09-26 · Updated 2025-04-02 · CVE-2021-33630

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions openEuler kernel versions 4.19.90 through 4.19.90-2401.2

Description The issue is related to a NULL Pointer Dereference vulnerability in the openEuler kernel on Linux, specifically in network modules, allowing Pointer Manipulation. This vulnerability is associated with program files net/sched/sch cbs.C. The vulnerability may allow an attacker to cause a denial of service.

Recommendations To resolve the issue, update the openEuler kernel to version 4.19.90-2401.3 or later. As a temporary workaround, consider disabling the network modules associated with the vulnerable program files net/sched/sch cbs.C until a patch is available.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-01035

CESA-2020_1567

CESA-2020_1769

CVE-2021-33630

DLA-3840-1

OESA-2024-1030

OESA-2024-1031

RHSA-2020:1567

RHSA-2020:1769

RHSA-2020_1567

RHSA-2020_1769

Affected Products

Centos

Red Hat

Openeuler Kernel

References · 50

• https://nvd.nist.gov/vuln/detail/CVE-2021-33630 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6121 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-33630 · Security Note
• https://ubuntu.com/security/CVE-2021-33630 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-33630 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-33630 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3840-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33631 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1031 · Vendor Advisory
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01035 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-33630 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35827 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6931 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33630 · Vendor Advisory