CVE-2021-3979

CVE-2021-3979 describes a key length flaw in Red Hat Ceph Storage and Fedora Project products. This vulnerability allows an attacker to exploit an incorrectly passed key length in an encryption algorithm, leading to the generation of a weaker, non-random encryption key. With a CVSS score of 6.5 (Medium), this flaw can result in a loss of confidentiality and integrity on encrypted disks, with a network attack vector and low attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.