PT-2021-4206 · Linux+9 · Linux Kernel+9

Minihanshen · Published 2021-08-20 · Updated 2023-08-14 · CVE-2021-3764

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the ccp run aes gcm cmd() function in the Linux kernel, which is associated with an uncontrolled resource consumption. This can be exploited to cause a denial of service, potentially disrupting system availability. The threat is similar to an older issue, indicating a possible pattern in system vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Resource Exhaustion

Weakness Enumeration

CWE-401

CWE-400

Related Identifiers

ALSA-2022:1988

ALT-PU-2021-3330

ALT-PU-2021-3331

ALT-PU-2021-3357

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

ALT-PU-2023-4894

BDU:2021-04806

CESA-2022_1975

CESA-2022_1988

CVE-2021-3764

DLA-2941-1

DSA-5096-1

MGASA-2021-0489

MGASA-2021-0490

OESA-2021-1379

OPENSUSE-SU-2021:1357-1

OPENSUSE-SU-2021:1365-1

OPENSUSE-SU-2021:3338-1

OPENSUSE-SU-2021:3387-1

OPENSUSE-SU-2021:3447-1

OPENSUSE-SU-2021:3876-1

OPENSUSE-SU-2021_1357-1

OPENSUSE-SU-2021_1365-1

OPENSUSE-SU-2021_3338-1

OPENSUSE-SU-2021_3387-1

OPENSUSE-SU-2021_3447-1

OPENSUSE-SU-2021_3876-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2021:3337-1

SUSE-SU-2021:3338-1

SUSE-SU-2021:3339-1

SUSE-SU-2021:3386-1

SUSE-SU-2021:3387-1

SUSE-SU-2021:3388-1

SUSE-SU-2021:3389-1

SUSE-SU-2021:3415-1

SUSE-SU-2021:3447-1

SUSE-SU-2021:3876-1

SUSE-SU-2021:3969-1

SUSE-SU-2021:3972-1

USN-5139-1

USN-5140-1

USN-5161-1

USN-5162-1

USN-5163-1

USN-5164-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 495

• https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680 · Patch
• https://osv.dev/vulnerability/OESA-2021-1379 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3876-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3764 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3388-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1988 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41864 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3389-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5163-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5164-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20317 · Security Note
• https://ubuntu.com/security/notices/USN-5162-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5162-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1988 · Vendor Advisory