CVE-2021-3744

kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

Published Mar 4, 2022 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2941-1 linux-4.19 security update
Debian DSA Debian DSA DSA-5096-1 linux security update
EUVD EUVD EUVD-2021-27020 A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.
Ubuntu USN Ubuntu USN USN-5139-1 Linux kernel (OEM 5.10) vulnerabilities
Ubuntu USN Ubuntu USN USN-5140-1 Linux kernel (OEM 5.14) vulnerabilities
Ubuntu USN Ubuntu USN USN-5161-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5162-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5163-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5164-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 3, 2024, 5:01 PM
Reserved
Aug 27, 2021, 12:00 AM
Status
Modified
Published
Mar 4, 2022, 4:15 PM
Modified
Jun 17, 2026, 4:05 AM
Severity
Moderate
Public date
Aug 20, 2021, 12:00 AM