VULNERABILITY INTELLIGENCE

CVE-2021-33574

CVSS score9.8 CRITICAL
EPSS probability3.52%
CISA KEVNot currently listed
Published2021-05-25
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

Weakness classification

  • nvd@nist.gov: CWE-416

Primary references