Privilege Escalation Vulnerability in GNOME Shell on Linux Distributions
CVE-2021-3982
5.5MEDIUM
Summary
A privilege escalation vulnerability affects GNOME Shell in Linux distributions that utilize CAP_SYS_NICE. An attacker with low privileges can exploit the improper implementation of CAP_SYS_NICE, enabling them to increase the process scheduler priority of their code. This may lead to denial of service (DoS) for other applications running on the same system, potentially disrupting the normal operations of the affected environment.
Affected Version(s)
gnome-shell gnome-shell downstream versions using CAP_SYS_NICE
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved