CVE-2021-37600
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a larg…
Published Jul 30, 2021 · updated Oct 14, 2026 · kernel util-linux
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Jul 30, 2021 · NIST NVD
Detected
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
Oct 14, 2026 · NIST NVD
Updated
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
Affected
- cpe kernel/util-linuxversion unspecified
- cpe netapp/ontap select deploy administration utilityversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2021-37600
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2021-37600
30-day exploitation probability 0.7%
first.org - NIST NVDVulnerability recordCVE-2021-37600
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly i
nvd.nist.gov