Skip to content
OpenAdvisories
Unscored CVE-2021-3982 EUVD-2021-27183GHSA-w69m-w3gr-72pp

Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege perm…

Published Apr 29, 2022 · Updated Aug 3, 2024 · Assigned by redhat

Description

Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler priority leading to possible DoS of other services running in the same machine.

Affected products

VendorProductAffectedFixed
— gnome-shell gnome-shell downstream versions using CAP_SYS_NICE —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS gnome-shell No fix yet —

References