CVE-2021-3744: linux kernel +22 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2021-3744

CVSS 5.5 · Medium EPSS 0,53%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel, fedoraproject fedora +21 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.

Rincian

Terbit di NVD: 4 Maret 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-401: Missing Release of Memory after Effective Lifetime
EPSS (30 hari): 0,53% peluang dieksploitasi; lebih tinggi dari 43,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Semua versi sebelum 5.15
linux	linux kernel	Versi 5.15
linux	linux kernel	Versi 5.15 rc1
linux	linux kernel	Versi 5.15 rc2
linux	linux kernel	Versi 5.15 rc3
fedoraproject	fedora	Versi 33
fedoraproject	fedora	Versi 34
fedoraproject	fedora	Versi 35
debian	debian linux	Versi 9.0
debian	debian linux	Versi 10.0
redhat	build of quarkus	Versi 2.0
redhat	codeready linux builder	Versi 8.0
redhat	codeready linux builder eus	Versi 8.6
redhat	codeready linux builder for power little endian	Versi 8.0
redhat	codeready linux builder for power little endian eus	Versi 8.6
redhat	developer tools	Versi 1.0
redhat	enterprise linux eus	Versi 8.6
redhat	enterprise linux for ibm z systems eus	Versi 8.6
redhat	enterprise linux for power little endian eus	Versi 8.6
redhat	enterprise linux for real time	Versi 8
redhat	enterprise linux for real time	Versi 8.6
redhat	enterprise linux for real time for nfv	Versi 8
redhat	enterprise linux for real time for nfv tus	Versi 8.6
redhat	enterprise linux server eus	Versi 8.6
redhat	enterprise linux server for power little endian update services for sap solutions	Versi 8.6
redhat	enterprise linux server tus	Versi 8.6
redhat	enterprise linux server update services for sap solutions	Versi 8.6
redhat	virtualization host	Versi 4.0
oracle	communications cloud native core binding support function	Versi 22.1.3
oracle	communications cloud native core network exposure function	Versi 22.1.1
oracle	communications cloud native core policy	Versi 22.2.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680 patch · advisory pihak ketiga
https://kernel.googlesource.com/pub/scm/linux/kernel/git/herbert/crypto-2.6/+/505d9dcb0f7ddf9d075e729523a33d38... mailing list · patch · advisory pihak ketiga
https://seclists.org/oss-sec/2021/q3/164 exploit · mailing list · patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujul2022.html patch · advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2021/09/14/1 exploit · mailing list · advisory pihak ketiga
https://bugzilla.redhat.com/show_bug.cgi?id=2000627 issue tracking · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html mailing list · advisory pihak ketiga
https://www.debian.org/security/2022/dsa-5096 advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BLLVKYAIETEO...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAT3RERO6QBKS...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYKURLXBB2555...

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.