CVE-2021-3679CWE-400
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a…
published August 5, 2021
What it is
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00751 · 54.5th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2021-08-05T19:54Z
EPSS history
Timeline