CVE-2021-3744 is a memory leak vulnerability in the Linux kernel's ccp_run_aes_gcm_cmd() function, affecting Debian, Fedora, Linux, Oracle, and Red Hat distributions. This flaw, similar to CVE-2019-18808, could allow a local attacker to cause a denial of service through excessive memory consumption. Rated Medium severity (CVSS 5.5), it requires local access and low privileges, but has no impact on confidentiality or integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.
Mar 8, 2022kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
Aug 20, 2021