CVE-2021-3923: Infoleak
First published: Wed Nov 03 2021(Updated: )
A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <5.15.14 | |
| Redhat Enterprise Linux | =6.0 | |
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux | =8.0 | |
| Fedoraproject Fedora | =37 | |
| redhat/kernel | <5.16 | 5.16 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=2019643
- https://lore.kernel.org/all/20220204100036.GA12348@kili/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2181601
- https://git.kernel.org/linus/e1e354771812b12f0b4c433bbaf916f87cd0f6c7
- https://access.redhat.com/errata/RHSA-2022:1988
- https://access.redhat.com/errata/RHSA-2022:1975
- https://exchange.xforce.ibmcloud.com/vulnerabilities/251995
- https://www.ibm.com/support/pages/node/7144861 (Advisory)
- https://lore.kernel.org/all/20220204100036.GA12348%40kili/
- collector/nvd-index
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- collector/ibm-support
- source/IBM
- agent/author
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-3923
- agent/software-canonical-lookup
- agent/tags
- agent/trending
- vendor/linux
- canonical/linux linux kernel
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/6.0
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/8.0
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/37
- package-manager/redhat