{"id":"CVE-2021-3744","published":"2022-03-04T15:55:17Z","modified":"2024-08-03T17:01:08Z","title":"A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in…","vendor":null,"product":null,"tier":"tail","description":{"text":"A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00533,"percentile":0.44942,"provenance":"source"},"cwes":[{"id":"CWE-401","name":"Missing Release of Memory after Effective Lifetime"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/09/14/1","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYKURLXBB2555ASWMPDNMBUPD6AG2JKQ/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BLLVKYAIETEORUPTFO3TR3C33ZPFXQM/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAT3RERO6QBKSPJBNNRWY3D4NCGTFOS7/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000627","tags":["x_refsource_MISC"]},{"url":"https://seclists.org/oss-sec/2021/q3/164","tags":["x_refsource_MISC"]},{"url":"https://kernel.googlesource.com/pub/scm/linux/kernel/git/herbert/crypto-2.6/+/505d9dcb0f7ddf9d075e729523a33d38642ae680%5E%21/#F0","tags":["x_refsource_MISC"]},{"url":"https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680","tags":["x_refsource_MISC"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.debian.org/security/2022/dsa-5096","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_refsource_MISC"]}],"priority":{"score":9.0,"factors":[{"name":"EPSS percentile","points":8.99}]},"affectedVersions":[{"vendor":"n/a","product":"kernel","versions":["Fixed in v5.15-rc4 and above."]}],"euvd":{"id":"EUVD-2021-27020","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2019-18808-family-cve-2019-18808","parents":[{"from":"CVE-2019-18808","to":"CVE-2021-3744","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This vulnerability is similar with the older CVE-2019-18808.","from":"CVE.org","in":"CVE-2021-3744"},{"kind":"same-code","provenance":"machine","files":["drivers/crypto/ccp/ccp-ops.c"],"commits":["https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2","https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680"],"basis":"shared function","functions":["ccp_cmd_queue"]}]}]}}