Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-3714
HistoryAug 23, 2022 - 12:00 a.m.

CVE-2021-3714

2022-08-2300:00:00
ubuntu.com
ubuntu.com
23

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%

A flaw was found in the Linux kernels memory deduplication mechanism.
Previous work has shown that memory deduplication can be attacked via a
local exploitation mechanism. The same technique can be used if an attacker
can upload page sized files and detect the change in access time from a
networked service to determine if the page has been merged.

Bugs

Notes

Author Note
rodrigo-zaiden there is no upstream fix available as of 2024-06-17

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%