CVE-2021-3764

Summary: CVE-2021-3764 is a memory-leak DoS in the Linux kernel related to the ccp_run_aes_gcm_cmd() function in the CCP crypto path (ccp-ops). Connected sources (Astra Linux advisories and Amazon Linux advisories) corroborate a memory-leak/DoS impact similar to CVE-2019-18808, with the highest t...

CVE-2021-3739

CVE-2021-3739 is a local NULL pointer dereference in the Linux kernel’s btrfs_rm_device() (fs/btrfs/volumes.c) that requires CAP_SYS_ADMIN to trigger. The issue can crash the system or leak kernel information, with impact to availability and, to a lesser extent, confidentiality. Multiple connecte...

CVE-2021-3736

CVE-2021-3736 affects the Linux kernel in mbochs_ioctl within samples/vfio-mdev/mbochs.c used by VFIO mediated devices. The flaw is a memory leak that could allow a local attacker to leak internal kernel information. Some sources note a patched kernel package (e.g., kernel 5.10.131.1-1 in Mariner...