Linux Kernel memcg Subsystem ipc/sem.c sem_alloc/find_alloc_undo resource consumption

Summaryinfo

A vulnerability was found in Linux Kernel. It has been classified as problematic. This vulnerability affects the function sem_alloc/find_alloc_undo of the file ipc/sem.c of the component memcg Subsystem. The manipulation leads to resource consumption. This vulnerability is listed as CVE-2021-3759. The attack may be initiated remotely. In addition, an exploit is available. It is recommended to apply a patch to fix this issue.

Detailsinfo

A vulnerability was found in Linux Kernel (Operating System) (unknown version) and classified as problematic. This issue affects the function sem_alloc/find_alloc_undo of the file ipc/sem.c of the component memcg Subsystem. The manipulation with an unknown input leads to a resource consumption vulnerability. Using CWE to declare the problem leads to CWE-400. The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources. Impacted is availability. The summary by CVE is:

A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.

The weakness was presented 08/24/2022. It is possible to read the advisory at access.redhat.com. The identification of this vulnerability is CVE-2021-3759 since 09/01/2021. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

The exploit is available at lore.kernel.org. It is declared as proof-of-concept. The vulnerability scanner Nessus provides a plugin with the ID 212202 (Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12868)), which helps to determine the existence of the flaw in a target environment.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at lore.kernel.org.

The vulnerability is also documented in the vulnerability database at Tenable (212202). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion