In librt in the GNU C Library (aka glibc) through 2.34 sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.

🗓️ 23 Aug 2021 07:00:00Reported by MicrosoftType

Null pointer dereference in glibc mq_notify.c from NOTIFY_REMOVED data, CVE-2021-33574 fix.

Reporter	Title	Published	Views	Family All 205
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues	12 Dec 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in glibc affects IBM Integrated Analytics System [ CVE-2021-33574]	26 Sep 202413:32	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability	15 Dec 202106:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.7 is vulnerable to multiple Operator package issues	26 Mar 202503:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability.	22 Dec 202110:07	–	ibm
ATTACKERKB	CVE-2021-33574	25 May 202122:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : glibc (ALAS-2023-2371)	4 Dec 202300:00	–	nessus