PT-2022-10279 · Alt Linux+9 · Alt Linux+9

Published 2022-08-05 · Updated 2025-04-24 · CVE-2021-33646

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue is related to the th read() function, which does not free the variable t->th buf.gnu longname after allocating memory. This may cause a memory leak. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2023:2898

ALT-PU-2023-7462

ALT-PU-2023-7618

ALT-PU-2025-5034

AZL-10545

AZL-34949

BDU:2025-05001

CESA-2023_2898

CVE-2021-33646

DLA-4033-1

MGASA-2022-0335

OESA-2022-1807

RHSA-2023:2898

RHSA-2023_2898

USN-7398-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 51

• https://ubuntu.com/security/CVE-2021-33644 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5YSHZY753R7XW6CIKJVAWI373WW3YRRJ · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-33646 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2898 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7Q26QDNOJDOFYWMJWEIK5XR62M2FF6IJ · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0335 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0335.html · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFDKQWYWYWJ2T · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/OD4HEBSTI22FNYKOKK7W3X6ZQE6FV3XC · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33643 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-2898.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33643 · Security Note