{"id":"CVE-2021-3764","published":"2022-08-23T15:52:14Z","modified":"2024-08-03T17:09:08Z","title":"A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a…","vendor":null,"product":null,"tier":"tail","description":{"text":"A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system availability.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00274,"percentile":0.19846,"provenance":"source"},"cwes":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption"}],"references":[{"url":"https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680","tags":["x_refsource_MISC"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3764","tags":["x_refsource_MISC"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997467","tags":["x_refsource_MISC"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3764","tags":["x_refsource_MISC"]}],"priority":{"score":4.0,"factors":[{"name":"EPSS percentile","points":3.97}]},"affectedVersions":[{"vendor":"n/a","product":"Linux Kernel","versions":["Fixed in v5.15-rc4"]}],"euvd":{"id":"EUVD-2021-27035","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2019-18808-family-cve-2019-18808","parents":[{"from":"CVE-2019-18808","to":"CVE-2021-3764","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"The vulnerability is similar to the older CVE-2019-18808.","from":"CVE.org","in":"CVE-2021-3764"},{"kind":"same-code","provenance":"machine","files":["drivers/crypto/ccp/ccp-ops.c"],"commits":["https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2","https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680"],"basis":"shared function","functions":["ccp_cmd_queue"]}]}]}}