Search/CVE-2021-38604

● CVE — High

CVE-2021-38604

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.

View graph Watch Export

CVSS v3.1

7.5 HIGH

EPSS

3.04%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Connections

9 relationships

enterprise operations monitor

communications cloud native core network function cloud native environment

communications cloud native core unified data repository

communications cloud native core security edge protection proxy

communications cloud native core network repository function

communications cloud native core binding support function

Timeline

disclosure → media coverage

Aug 12, 2021

Disclosure — published as a CVE record. · last revised by NVD May 30, 2025