Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

CVE-2021-33630 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2021-33630

CVE-2021-33630

MEDIUM5.5

NULL-ptr-deref in network sched

Published Jan 18, 2024

Modified 10 months ago

Details

NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C.

This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.

References

WEB

http://www.openwall.com/lists/oss-security/2024/01/30/10

WEB

http://www.openwall.com/lists/oss-security/2024/01/30/3

WEB

http://www.openwall.com/lists/oss-security/2024/01/30/4

WEB

http://www.openwall.com/lists/oss-security/2024/01/30/5

WEB

http://www.openwall.com/lists/oss-security/2024/01/30/9

WEB

http://www.openwall.com/lists/oss-security/2024/01/31/2

WEB

http://www.openwall.com/lists/oss-security/2024/01/31/3

WEB

http://www.openwall.com/lists/oss-security/2024/02/02/6

WEB

http://www.openwall.com/lists/oss-security/2024/02/02/9

WEB

http://www.openwall.com/lists/oss-security/2024/02/03/1

WEB

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e8b9bfa110896f95d602d8c98d5f9d67e41d78c

WEB

https://gitee.com/src-openeuler/kernel/pulls/1389

WEB

https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2021-33630

WEB

https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030

WEB

https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

Memory Safety

CWE-476

NULL Pointer Dereference

Ecosystems

Timeline

PublishedJan 18, 2024

ModifiedMay 7, 2025