← voltar
CVE-2021-3923

CVE-2021-3923

CVSS 2.3 LOWEPSS 0.2%CWE-200
Vexday Risk Score
8Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 2.3EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
27 mar 2023Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
n/a · kernel