CVE-2021-33574
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free.
Published May 25, 2021 · updated Oct 14, 2026 · gnu glibc
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 25, 2021 · NIST NVD
Detected
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
Oct 14, 2026 · NIST NVD
Updated
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
Affected
- cpe fedoraproject/fedora33
- cpe fedoraproject/fedora34
- cpe gnu/glibc2.32
- cpe gnu/glibc2.33
- cpe netapp/cloud backupversion unspecified
- cpe netapp/e-series santricity os controllerversion unspecified
- cpe netapp/h300e firmwareversion unspecified
- cpe netapp/h300s firmwareversion unspecified
- cpe netapp/h500e firmwareversion unspecified
- cpe netapp/h500s firmwareversion unspecified
- cpe netapp/h700s firmwareversion unspecified
- cpe netapp/solidfire baseboard management controller firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2021-33574
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2021-33574
30-day exploitation probability 3.5%
first.org - NIST NVDVulnerability recordCVE-2021-33574
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (applicat
nvd.nist.gov