What’s Vulnerable › Vulnerabilities

CVE-2021-21781

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-18 · updated 2026-06-17
• Weakness: CWE-908

Description

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11

Affected products

• Linux kernel: 5.4.54, 5.4.66
• Oracle Communications Cloud Native Core Binding Support Function: 22.1.3
• Oracle Communications Cloud Native Core Network Exposure Function: 22.1.1
• Oracle Communications Cloud Native Core Policy: 22.2.0

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1243
• https://www.oracle.com/security-alerts/cpujul2022.html
• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1243
• https://www.oracle.com/security-alerts/cpujul2022.html

Get alerted when CVE-2021-21781 or the next vulnerability affects your stack