{"id":"CVE-2021-33630","state":"PUBLISHED","title":"NULL-ptr-deref in network sched","description":"NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C.\n\nThis issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.","publishedAt":"2024-01-18T15:00:49.312Z","updatedAt":"2025-05-07T20:14:53.453Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"openEuler"},"assigner":"openEuler","products":["openEuler kernel"],"affected":[{"vendor":"openEuler","product":"kernel","packageName":"kernel","defaultStatus":"unaffected","versions":[{"version":"4.19.90","status":"affected","lessThan":"4.19.90-2401.3","changes":[{"at":"b2239f607df25fc401179e6dd4b7406f942a7632 net/sched: cbs: Fix not adding cbs instance to list","status":"unaffected"}],"versionType":"git"}],"collectionURL":"https://gitee.com/src-openeuler","modules":["network"],"platforms":["Linux"],"programFiles":["https://gitee.com/openeuler/kernel/blob/openEuler-1.0-LTS/net/sched/sch_cbs.c"],"repo":"https://gitee.com/src-openeuler/kernel"}],"references":["https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030","https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031","https://gitee.com/src-openeuler/kernel/pulls/1389","https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e8b9bfa110896f95d602d8c98d5f9d67e41d78c","http://www.openwall.com/lists/oss-security/2024/01/30/3","http://www.openwall.com/lists/oss-security/2024/01/30/4","http://www.openwall.com/lists/oss-security/2024/01/30/5","http://www.openwall.com/lists/oss-security/2024/01/30/9","http://www.openwall.com/lists/oss-security/2024/01/30/10","http://www.openwall.com/lists/oss-security/2024/01/31/3","http://www.openwall.com/lists/oss-security/2024/01/31/2","http://www.openwall.com/lists/oss-security/2024/02/02/6","http://www.openwall.com/lists/oss-security/2024/02/02/9","http://www.openwall.com/lists/oss-security/2024/02/03/1","https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T19:48:36.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/33xxx/CVE-2021-33630.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-33630","state":"PUBLISHED","datePublished":"2024-01-18T15:00:49.312Z","dateUpdated":"2025-05-07T20:14:53.453Z","assignerShortName":"openEuler","assignerOrgId":"7e1ac599-2767-43fa-b3ea-f10178cc98f2","dateReserved":"2021-05-28T14:26:05.940Z"},"containers":{"cna":{"title":"NULL-ptr-deref in network sched","descriptions":[{"lang":"en","value":"NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C.\n\nThis issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3."}],"affected":[{"vendor":"openEuler","product":"kernel","packageName":"kernel","defaultStatus":"unaffected","versions":[{"version":"4.19.90","status":"affected","lessThan":"4.19.90-2401.3","changes":[{"at":"b2239f607df25fc401179e6dd4b7406f942a7632 net/sched: cbs: Fix not adding cbs instance to list","status":"unaffected"}],"versionType":"git"}],"collectionURL":"https://gitee.com/src-openeuler","modules":["network"],"platforms":["Linux"],"programFiles":["https://gitee.com/openeuler/kernel/blob/openEuler-1.0-LTS/net/sched/sch_cbs.c"],"repo":"https://gitee.com/src-openeuler/kernel"}],"references":[{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030"},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031"},{"url":"https://gitee.com/src-openeuler/kernel/pulls/1389"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e8b9bfa110896f95d602d8c98d5f9d67e41d78c"},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/3"},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/4"},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/5"},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/9"},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/10"},{"url":"http://www.openwall.com/lists/oss-security/2024/01/31/3"},{"url":"http://www.openwall.com/lists/oss-security/2024/01/31/2"},{"url":"http://www.openwall.com/lists/oss-security/2024/02/02/6"},{"url":"http://www.openwall.com/lists/oss-security/2024/02/02/9"},{"url":"http://www.openwall.com/lists/oss-security/2024/02/03/1"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","description":"CWE-476 NULL Pointer Dereference","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"openEuler","orgId":"7e1ac599-2767-43fa-b3ea-f10178cc98f2","dateUpdated":"2024-06-27T12:09:01.557Z"},"impacts":[{"capecId":"CAPEC-129","descriptions":[{"lang":"en","value":"CAPEC-129 Pointer Manipulation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030","tags":["x_transferred"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031","tags":["x_transferred"]},{"url":"https://gitee.com/src-openeuler/kernel/pulls/1389","tags":["x_transferred"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e8b9bfa110896f95d602d8c98d5f9d67e41d78c","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/9","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/10","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/31/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/31/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/02/6","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/02/9","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/03/1","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T23:58:21.572Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-07T20:14:40.648453Z","id":"CVE-2021-33630","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-07T20:14:53.453Z"}}]}}}