CVE-2021-3669

Description

A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.

Scores

Weaknesses (CWE)

• CWE-400
• CWE-770

European references

• ENISA EUVD · EUVD-2021-26961
• GCVE · GCVE-0-2021-3669

CERT-FR advisories

• CERTFR-2024-AVI-0872 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
• CERTFR-2023-AVI-0448 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
• CERTFR-2023-AVI-0333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
• CERTFR-2023-AVI-0315 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
• CERTFR-2023-AVI-0278 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
• CERTFR-2023-AVI-0210 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
• CERTFR-2022-AVI-591 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
• CERTFR-2021-AVI-797 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
• CERTFR-2021-AVI-785 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
• cpe:2.3:a:ibm:spectrum_copy_data_management:*:*:*:*:*:*:*:* ≥ 2.2.0.0 ≤ 2.2.15.0
• cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:* ≥ 10.1.0 ≤ 10.1.10.2
• cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:build_of_quarkus:*:*:*:*:*:*:*:* ≥ 2.0 < 2.7
• cpe:2.3:a:redhat:developer_tools:1.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.6:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.6:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:codeready_linux_builder:-:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:openshift_container_platform:4.6:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:openshift_container_platform:4.7:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:openshift_container_platform:4.9:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*

Affected products

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1986473
• https://bugzilla.redhat.com/show_bug.cgi?id=1980619
• https://access.redhat.com/security/cve/CVE-2021-3669
• https://security-tracker.debian.org/tracker/CVE-2021-3669
• https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html

Sources