Vulnerabilities > CVE-2021-29647 - Missing Initialization of Resource vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
linux
fedoraproject
debian
CWE-909
NVD
Published: 2021-03-30
Updated: 2023-11-07

Summary

An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.

Vulnerable Configurations

Part Description Count
OS
Linux
3
OS
Fedoraproject
3
OS
Debian
1

Common Weakness Enumeration (CWE)

References