CVE-2021-3736

EPSS 0.05%
Published 23.08.2022 16:15:09
Last modified 21.11.2024 06:22:17
Source secalert@redhat.com
CVE-Watchlists
Login
Open
Login

A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal kernel information.

Affected products Warnungen 0 Metrics 2 CWE 2 References 6

Data is provided by the National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 5.14.20

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.163

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

https://access.redhat.com/security/cve/CVE-2021-3736

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1995570

Third Party Advisory

Issue Tracking

https://github.com/torvalds/linux/commit/de5494af4815a4c9328536c72741229b7de88e7f

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-3736

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-3736

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-3736

EUVD