CVE-2021-3759
Aliases:UBUNTU-CVE-2021-3759DEBIAN-CVE-2021-3759CGA-23hg-pphm-983jCGA-23vw-grx3-f6v7CGA-23wf-qm5q-cf5cCGA-23wv-847m-p4gqCGA-29r8-hj3j-rm48CGA-2qxh-mmx2-fxjvCGA-32c6-pp8h-pr9vCGA-32g7-pcj3-68r5CGA-3cfr-85jx-3w5mCGA-45rm-m5cw-fm63CGA-47pg-v4rm-g575CGA-4f69-8p39-rfc6CGA-4jp4-wpqf-m9r7CGA-4mvj-5hx8-8mh2CGA-4rj7-c45j-c425CGA-4vw5-4qv3-h97cCGA-559q-6fcg-j2w9CGA-579h-76w7-68mhCGA-5864-2xr2-3hv6CGA-5x5r-8f8h-fwr3CGA-67jc-5h97-8hh4CGA-6fgf-rv4v-pc23CGA-6v8h-839g-2vgrCGA-6x3r-qj6m-92v2CGA-73cc-fjh4-mwrpCGA-757f-q752-hrp5CGA-7687-whv5-4952CGA-78pj-rq67-3c54CGA-7f6c-jwqp-hm8rCGA-7f8r-pgj8-8g6xCGA-7pwh-rf89-6r68CGA-843j-h629-h76mCGA-86gq-3m43-7mq7CGA-896m-88jj-vgmhCGA-8f6f-fv6v-82h4CGA-8h4h-jq72-2hrrCGA-8hc8-wx38-mrq2CGA-8vrm-j87c-4578CGA-928q-qw2f-wp49CGA-9wv6-8h33-8fj3CGA-9wx3-4v79-jwxjCGA-c2c9-2q96-jmwxCGA-c8c8-q9f6-g7pqCGA-c956-7w8q-2v89CGA-cf6f-w43f-5gv5CGA-crq2-xx52-p83hCGA-fg52-gv66-qrx5CGA-fgvp-66mr-687cCGA-fm6f-6f85-rqc7CGA-fq8p-cxc7-3737CGA-g3q7-rmvj-pqwvCGA-g5mj-h9xm-p3x9CGA-g5q3-qqcj-v36cCGA-g6ph-699r-w6r6CGA-g6xm-3v4f-hpmfCGA-g94f-chj4-q457CGA-gqqf-cp2r-mxcqCGA-gx7r-3vxm-2qq6CGA-h75v-gj75-54jvCGA-h8fh-529m-9fhpCGA-hf7f-v6m9-39jfCGA-hfc5-5qcq-gx4hCGA-hgp3-2w2j-c4p9CGA-j622-m5r9-mf5cCGA-j9vq-4p2g-x64pCGA-jpc6-34h7-9x6pCGA-jwr7-f3c9-q2wqCGA-jwx8-mqh8-32c5CGA-jxf3-w862-33f8CGA-m6vr-5hmr-pcv4CGA-mf39-98cx-9c99CGA-mhwv-j8mh-5pvwCGA-p5hw-vf56-m885CGA-p878-h5w5-qx49CGA-p9m8-gjf6-gmjqCGA-p9wh-c3wj-px8cCGA-pc3g-q4rm-3rfpCGA-pr6g-q56m-xg2mCGA-pwm7-r4jf-9q2gCGA-pwxc-9p57-365hCGA-q388-857p-v8hfCGA-q5rp-5572-qh94CGA-q6r4-hg4w-953rCGA-q8r5-p88c-gvqpCGA-qfgq-4vwg-qh56CGA-qj4p-g73p-4pprCGA-qj5c-mpgh-4qcfCGA-qqc5-62j3-69chCGA-r339-7ggq-p5rhCGA-rhvq-mh6r-5xf7CGA-rw49-vc8c-cr3mCGA-rxgp-5grx-x538CGA-rxgp-fvrh-2vxpCGA-v3h9-x478-8qvfCGA-vcx3-h435-gmv7CGA-vfg5-8f95-fjmwCGA-vfp8-qfq2-wcrgCGA-vgqj-84p4-rv5mCGA-vwgm-qfxg-7hw5CGA-vx4x-f3rh-2x7wCGA-w4hg-3hxg-4j3xCGA-w6j6-f8xg-x7v6CGA-wgw7-rh3w-4prfCGA-wqh3-9m9v-8jp6CGA-wqwf-hff4-6x8fCGA-wxfp-7284-rhcqCGA-x2f7-856c-98f2CGA-x3rf-6ch9-292fCGA-x55q-8295-mvc9CGA-xc3q-f9wp-j3vrCGA-xgg9-jc5q-5c6xCGA-xjvg-93cp-75j6CGA-xq3g-j28q-2wgrCGA-xvv9-cm2m-9qrpCGA-7v59-mhfv-x7m6CGA-x53p-72jp-m4f4CGA-3x48-hxph-hgppCGA-6pqg-r3fx-6355CGA-6q4m-vq6g-cfv5CGA-7mvj-mg26-49q6CGA-8hv6-g2pr-fjp7CGA-f5gm-8mqg-j46gCGA-f5h6-4f95-cx5mCGA-h5j5-4wj4-64v5CGA-j4g3-h9gg-jcmvCGA-j9hp-g2f8-mh5pCGA-mmpf-cg8w-86ppCGA-qp8v-gr84-7rp5CGA-xxj4-579r-89wqCGA-p785-5fvj-724vCGA-q577-wcr5-jc82USN-5135-1CGA-f3hw-9p82-ccp7CGA-h9c4-263m-8qgvCGA-m274-cx98-2656CGA-xh4q-cxh7-9wmwCGA-4fp7-h8vf-744gCGA-6hmj-9mrj-qqjrCGA-rpj9-c2g3-p2pr
Advisory lineage Upstream: 1 Downstream: 32
Modified
Published: 23 Aug 2022, 00:00
Last modified:03 Aug 2024, 17:09
Vulnerability Summary
Overall Risk (default)
low
22/100 CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.36% LOW
0% probability +0.34%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
23 Aug 2022, 00:00
Published
Vulnerability first disclosed
03 Aug 2024, 17:09
Last Modified
Vulnerability information updated
Description
A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Metrics
- v4.0•MEDIUM•Score: 6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.36%• Percentile: 30%
Techniques & Countermeasures
- CWE-400•Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
- CWE-770•Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 0 | < 6.18.10-r0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 6.18.5-r0 | < 0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 6.12.65-r1 | < 0
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 0 | < 6.18.5-r0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-gcp-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 6.18.5-r0 | < 0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0
- chainguard•linux-qemu-6.18
< 6.18.10-r0
Showing first 50 affected entries in server-rendered view.
References (15)
- https://bugzilla.redhat.com/show_bug.cgi?id=1999675
- https://access.redhat.com/security/cve/CVE-2021-3759
- https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive%40gmail.com/
- https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
- https://ubuntu.com/security/CVE-2021-3759
- https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive@gmail.com/
- https://ubuntu.com/security/notices/USN-5115-1
- https://ubuntu.com/security/notices/USN-5117-1
- https://ubuntu.com/security/notices/USN-5120-1
- https://ubuntu.com/security/notices/USN-5135-1
- https://ubuntu.com/security/notices/USN-5136-1
- https://ubuntu.com/security/notices/USN-5137-1
- https://ubuntu.com/security/notices/USN-5137-2
- https://www.cve.org/CVERecord?id=CVE-2021-3759
- https://security-tracker.debian.org/tracker/CVE-2021-3759