CVE-2021-3743: Fedoraproject Fedora

High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Affected products

  • Fedoraproject Fedora: version 34 only
  • Linux Linux Kernel: after 5.14.1, before 5.17 (fixed in 5.17); version 5.14 only; version 5.17 only
  • Netapp h300e Firmware: affected versions not specified
  • Netapp h300s Firmware: affected versions not specified
  • Netapp h410c Firmware: affected versions not specified
  • Netapp h410s Firmware: affected versions not specified
  • Netapp h500e Firmware: affected versions not specified
  • Netapp h500s Firmware: affected versions not specified
  • Netapp h700e Firmware: affected versions not specified
  • Netapp h700s Firmware: affected versions not specified
  • Oracle Communications Cloud Native Core Binding Support Function: version 22.1.3 only
  • Oracle Communications Cloud Native Core Network Exposure Function: version 22.1.1 only
  • Oracle Communications Cloud Native Core Policy: version 22.2.0 only

Published 2022-03-04. Last modified 2026-06-17.