CVE-2021-38604

Published: Aug 12, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.

Affected (11)

Products: Gnu: Glibc · Fedoraproject: Fedora · Oracle: Communications Cloud Native Core Binding Support Function, Communications Cloud Native Core Network Function Cloud Native Environment, Communications Cloud Native Core Network Repository Function, Communications Cloud Native Core Security Edge Protection Proxy, Communications Cloud Native Core Unified Data Repository, Enterprise Operations Monitor

1 product

1 product

6 products

Communications Cloud Native Core Binding Support Function

Communications Cloud Native Core Network Function Cloud Native Environment

Communications Cloud Native Core Network Repository Function

Communications Cloud Native Core Security Edge Protection Proxy

Communications Cloud Native Core Unified Data Repository

Enterprise Operations Monitor

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Glibc	Up to 2.34

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 35

Configuration C

9 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Cloud Native Core Binding Support Function	Version 22.1.3
Oracle Communications Cloud Native Core Network Function Cloud Native Environment	Version 22.1.0
Oracle Communications Cloud Native Core Network Repository Function	Version 22.1.2
Oracle Communications Cloud Native Core Network Repository Function	Version 22.2.0
Oracle Communications Cloud Native Core Security Edge Protection Proxy	Version 22.1.1
Oracle Communications Cloud Native Core Unified Data Repository	Version 22.2.0
Oracle Enterprise Operations Monitor	Version 4.3
Oracle Enterprise Operations Monitor	Version 4.4
Oracle Enterprise Operations Monitor	Version 5.0