CVE-2021-3753

Katalog CVE

CVSS 4.7 · Medium EPSS 0,36%

Kerentanan Out-of-bounds Read pada linux kernel, redhat enterprise linux +10 lainnya. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality.

Rincian

Terbit di NVD

16 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 28,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1999589 issue tracking · patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/2287a51ba822384834dafc1c798453375d1107c7 patch · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2021/09/01/4 exploit · mailing list · patch · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20221028-0003/ advisory pihak ketiga