CVE-2021-3753

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125 CWE-362

Affected software

No affected versions have been published.

Timeline

Published: Feb 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-375305.5A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.CVE-2021-375318.8SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a no CVE-2021-375324.3SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the conte CVE-2021-375336.5Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commo CVE-2021-375345.4app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.CVE-2021-375359.8SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary auth CVE-2021-375389.8Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to exec CVE-2021-375399.8Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.CVE-2021-37545.3A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This CVE-2021-375406.5In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.CVE-2021-375416.1In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.CVE-2021-375426.1In JetBrains TeamCity before 2020.2.3, XSS was possible.