SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-3669

A flaw was found in the Linux kernel.

MEDIUM 5.5EPSS 0.29%

Does this matter?

Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.

Description

A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.29% probability · 22th percentile
CISA KEV
Not listed
Weakness
CWE-400, CWE-770
Affected
linux/linux kernel · ibm/spectrum copy data management · ibm/spectrum protect plus · debian/debian linux · fedoraproject/fedora · redhat/build of quarkus · redhat/developer tools · redhat/enterprise linux · redhat/enterprise linux aus · redhat/enterprise linux for ibm z systems · redhat/enterprise linux for ibm z systems eus · redhat/enterprise linux for power little endian · redhat/enterprise linux for power little endian eus · redhat/enterprise linux for real time · redhat/enterprise linux for real time for nfv · redhat/enterprise linux for real time for nfv tus · redhat/enterprise linux for real time tus · redhat/enterprise linux server aus · redhat/enterprise linux server for power little endian update services for sap solutions · redhat/enterprise linux server tus · +3 more
Source
secalert@redhat.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.