CVE-2021-3923

Katalog CVE

CVSS 2.3 · Low EPSS 0,20%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada linux kernel, redhat enterprise linux +1 lainnya. Skor CVSS 3.1 2.3 (Low) menurut NVD.

Deskripsi (NVD)

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

Rincian

Terbit di NVD

27 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 8,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2019643 issue tracking · patch · advisory pihak ketiga
• https://lore.kernel.org/all/20220204100036.GA12348%40kili/