PT-2021-7356 · Linux+9 · Linux Kernel+9

Published 2021-08-20 · Updated 2025-06-18 · CVE-2021-3743

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2022:1988

ALT-PU-2022-1647

ALT-PU-2022-1730

ALT-PU-2022-1768

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

AZL-8921

BDU:2022-05777

CESA-2022_1975

CESA-2022_1988

CVE-2021-3743

DLA-2785-1

DSA-4978-1

MGASA-2021-0418

MGASA-2021-0419

OPENSUSE-SU-2021:1271-1

OPENSUSE-SU-2021:3179-1

OPENSUSE-SU-2021:3205-1

OPENSUSE-SU-2021_1271-1

OPENSUSE-SU-2021_3179-1

OPENSUSE-SU-2021_3205-1

OPENSUSE-SU-2024_2185-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2021:3177-1

SUSE-SU-2021:3178-1

SUSE-SU-2021:3179-1

SUSE-SU-2021:3205-1

SUSE-SU-2021:3205-2

SUSE-SU-2021:3207-1

SUSE-SU-2021:3415-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2183-1

SUSE-SU-2024:2185-1

SUSE-SU-2025:01995-1

USN-5113-1

USN-5115-1

USN-5117-1

USN-5136-1

USN-5137-1

USN-5137-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 960

• 🔥 https://lists.openwall.net/netdev/2021/08/17/124 · Exploit
• 🔥 https://openwall.com/lists/oss-security/2021/08/27/2 · Exploit
• https://github.com/torvalds/linux/commit/7e78c597c3ebfd0cb329aa09a838734147e4f117 · Patch
• https://ubuntu.com/security/CVE-2021-40490 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3205-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-3702 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3743 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3179-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3207-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5137-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1988.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2010-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01995-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5115-1 · Vendor Advisory