A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.
References
Link | Resource |
---|---|
https://access.redhat.com/security/cve/CVE-2021-3759 | Third Party Advisory |
https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive@gmail.com/ | Exploit Mailing List Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1999675 | Issue Tracking Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html | Mailing List Third Party Advisory |
Information
Published : 2022-08-23 09:15
Updated : 2023-02-28 17:23
NVD link : CVE-2021-3759
Mitre link : CVE-2021-3759
JSON object : View
CWE
CWE-400
Uncontrolled Resource Consumption
Products Affected
debian
- debian_linux
linux
- linux_kernel