Description
In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.
Affected Platforms
Oracle Communications Cloud Native Core Network Repository FunctionOracle Communications Cloud Native Core Network Function Cloud Native EnvironmentOracle Communications Cloud Native Core Security Edge Protection ProxyFedoraproject FedoraGnu GlibcOracle Communications Cloud Native Core Unified Data RepositoryOracle Communications Cloud Native Core Binding Support FunctionOracle Enterprise Operations Monitor