Vulnerabilities > CVE-2021-3982 - Improper Check for Dropped Privileges vulnerability in Gnome Gnome-Shell

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
gnome
CWE-273

Summary

Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler priority leading to possible DoS of other services running in the same machine.

Vulnerable Configurations

Part Description Count
Application
Gnome
1

Common Weakness Enumeration (CWE)