High severity7.5NVD Advisory· Published Aug 12, 2021· Updated Jun 17, 2026
CVE-2021-38604
CVE-2021-38604
Description
In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13- cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_operations_monitor:4.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:enterprise_operations_monitor:4.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_operations_monitor:4.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_operations_monitor:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- GNU C Library/GNU C Librarydescription
Patches
Vulnerability mechanics
References
8- sourceware.org/bugzilla/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- www.oracle.com/security-alerts/cpujul2022.htmlnvdPatchThird Party Advisory
- blog.tuxcare.com/cve/tuxcare-team-identifies-cve-2021-38604-a-new-vulnerability-in-glibcnvdExploitThird Party Advisory
- security.gentoo.org/glsa/202208-24nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20210909-0005/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GYEXYM37RCJWJ6B5KQUYQI4NZBDDYSXP/nvd
- sourceware.org/git/nvd
- sourceware.org/git/nvd
News mentions
0No linked articles in our index yet.