CVE-2021-3543CWE-416

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor

published June 1, 2021

CVSS
—
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.7th percentile
Weakness
CWE-416 · Use After Free
Published
2021-06-01T13:20Z
EPSS history
Timeline
  • 01 JUN 13:20Z
    A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor
    cvelistv5