CVE-2021-3744
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2022-03-04
- Last modified
- 2024-08-03
- Weaknesses
- CWE-401
Affected products
- Debian Linux (Debian)
- Fedora (Fedoraproject)
- Linux Kernel (Linux)
- Communications Cloud Native Core Binding Support Function (Oracle)
- Communications Cloud Native Core Network Exposure Function (Oracle)
- Communications Cloud Native Core Policy (Oracle)
- Build Of Quarkus (Redhat)
- Codeready Linux Builder (Redhat)
- Codeready Linux Builder Eus (Redhat)
- Codeready Linux Builder For Power Little Endian (Redhat)
- Codeready Linux Builder For Power Little Endian Eus (Redhat)
- Developer Tools (Redhat)
- Enterprise Linux Eus (Redhat)
- Enterprise Linux For Ibm Z Systems Eus (Redhat)
- Enterprise Linux For Power Little Endian Eus (Redhat)
- Enterprise Linux For Real Time (Redhat)
- Enterprise Linux For Real Time For Nfv (Redhat)
- Enterprise Linux For Real Time For Nfv Tus (Redhat)
- Enterprise Linux Server Eus (Redhat)
- Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions (Redhat)
- Enterprise Linux Server Tus (Redhat)
- Enterprise Linux Server Update Services For Sap Solutions (Redhat)
- Virtualization Host (Redhat)
References
- http://www.openwall.com/lists/oss-security/2021/09/14/1
- https://bugzilla.redhat.com/show_bug.cgi?id=2000627
- https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680
- https://kernel.googlesource.com/pub/scm/linux/kernel/git/herbert/crypto-2.6/+/505d9dcb0f7ddf9d075e729523a33d38642ae680%…
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BLLVKYAIETEORUPTFO3TR…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAT3RERO6QBKSPJBNNRWY3…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYKURLXBB2555ASWMPDNMB…
- https://seclists.org/oss-sec/2021/q3/164
- https://www.debian.org/security/2022/dsa-5096
- https://www.oracle.com/security-alerts/cpujul2022.html
