PT-2021-4203 · Linux+9 · Linux Kernel+9

Published 2021-08-20 · Updated 2024-06-15 · CVE-2021-3744

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an uncontrolled resource consumption in the Linux kernel's ccp-ops cryptodriver. It is caused by a memory leak flaw in the ccp run aes gcm cmd() function in drivers/crypto/ccp/ccp-ops.c. This allows attackers to cause a denial of service by consuming memory. The vulnerability is similar to an older issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Leak

Resource Exhaustion

Weakness Enumeration

CWE-401

CWE-400

Related Identifiers

ALSA-2022:1988

ALT-PU-2021-3330

ALT-PU-2021-3358

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2021-3660

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

ALT-PU-2023-4894

BDU:2021-04802

CESA-2022_1975

CESA-2022_1988

CVE-2021-3744

DLA-2941-1

DSA-5096-1

MGASA-2021-0489

MGASA-2021-0490

OESA-2021-1379

OPENSUSE-SU-2021:1357-1

OPENSUSE-SU-2021:1365-1

OPENSUSE-SU-2021:3338-1

OPENSUSE-SU-2021:3387-1

OPENSUSE-SU-2021:3447-1

OPENSUSE-SU-2021:3876-1

OPENSUSE-SU-2021_1357-1

OPENSUSE-SU-2021_1365-1

OPENSUSE-SU-2021_3338-1

OPENSUSE-SU-2021_3387-1

OPENSUSE-SU-2021_3447-1

OPENSUSE-SU-2021_3876-1

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2021:3337-1

SUSE-SU-2021:3338-1

SUSE-SU-2021:3339-1

SUSE-SU-2021:3386-1

SUSE-SU-2021:3387-1

SUSE-SU-2021:3388-1

SUSE-SU-2021:3389-1

SUSE-SU-2021:3415-1

SUSE-SU-2021:3447-1

SUSE-SU-2021:3876-1

SUSE-SU-2021:3969-1

SUSE-SU-2021:3972-1

USN-5139-1

USN-5140-1

USN-5161-1

USN-5162-1

USN-5163-1

USN-5164-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 696

• 🔥 https://seclists.org/oss-sec/2021/q3/164 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2021/09/14/1 · Exploit
• https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2021:3876-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3388-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3744 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3389-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BLLVKYAIETEORUPTFO3TR3C33ZPFXQM · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3744 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5163-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5164-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAT3RERO6QBKSPJBNNRWY3D4NCGTFOS7 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5140-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5139-1 · Vendor Advisory