Vulnerability Details CVE-2021-3543
A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.2%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 7.2
References
Products affected by CVE-2021-3543
-
cpe:2.3:a:nitro_enclaves_project:nitro_enclaves:*
-
cpe:2.3:o:fedoraproject:fedora:34
-
cpe:2.3:o:redhat:enterprise_linux:8.0