CVE-2021-33574

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

Score
CVSS 3.1 9.8 Critical
Status
Modified - cve@mitre.org
Published
2021-05-25
Last modified
2026-10-14
Weaknesses
CWE-416

Affected products

References

 
 
© AVABIS GmbH privacypolicy about