CVE-2021-3923

2023-03-2700:00:00

CWE-200

redhat

www.cve.org

linux kernel

rdma

infiniband

privileged account

kernel stack

information leak

5.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

A flaw was found in the Linux kernel’s implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "kernel",
    "versions": [
      {
        "version": "unknown",
        "status": "affected"
      }
    ]
  }
]