PT-2021-7675 · Linux+8 · Linux Kernel+8

Guilherme De Almeida Suckevicz · Published 2021-08-02 · Updated 2024-10-07 · CVE-2021-3669

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the Linux kernel is related to incorrect calculation of used IPC identifiers in the sysvipc find ipc() function. This issue may lead to resource exhaustion and denial of service (DoS) when measuring usage of shared memory does not scale with large shared memory segment counts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-400

Related Identifiers

ALSA-2022:1988

AZL-10676

AZL-34859

BDU:2023-01195

CESA-2022_1975

CESA-2022_1988

CVE-2021-3669

DLA-3912-1

OESA-2021-1379

OPENSUSE-SU-2021:1357-1

OPENSUSE-SU-2021:1365-1

OPENSUSE-SU-2021:3338-1

OPENSUSE-SU-2021:3387-1

OPENSUSE-SU-2021:3447-1

OPENSUSE-SU-2021_1357-1

OPENSUSE-SU-2021_1365-1

OPENSUSE-SU-2021_3338-1

OPENSUSE-SU-2021_3387-1

OPENSUSE-SU-2021_3447-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2021:3337-1

SUSE-SU-2021:3338-1

SUSE-SU-2021:3339-1

SUSE-SU-2021:3387-1

SUSE-SU-2021:3415-1

SUSE-SU-2021:3447-1

USN-5924-1

USN-5927-1

USN-5975-1

USN-5980-1

USN-5981-1

USN-5984-1

USN-5985-1

USN-5991-1

USN-6001-1

USN-6009-1

USN-6013-1

USN-6014-1

USN-6020-1

USN-6030-1

USN-6151-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 419

• https://osv.dev/vulnerability/OESA-2021-1379 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-26401 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1988 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41864 · Security Note
• https://osv.dev/vulnerability/USN-6151-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-43750 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5985-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5984-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23559 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39842 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5975-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0394 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20317 · Security Note