{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c",
    "tracking": {
      "current_release_date": "2026-07-27T09:59:50+00:00",
      "generator": {
        "date": "2026-07-27T09:59:50+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.1.0"
        }
      },
      "id": "CVE-2021-37600",
      "initial_release_date": "2021-07-27T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-07-27T09:59:50+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.10.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.10.z",
              "product_id": "rhel-8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.0",
            "product": {
              "name": "Red Hat Enterprise Linux 9.0",
              "product_id": "rhel-9.0",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libblkid",
            "product": {
              "name": "libblkid",
              "product_id": "libblkid",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libblkid"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libblkid-devel",
            "product": {
              "name": "libblkid-devel",
              "product_id": "libblkid-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libblkid-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libfdisk-devel",
            "product": {
              "name": "libfdisk-devel",
              "product_id": "libfdisk-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libfdisk-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libmount",
            "product": {
              "name": "libmount",
              "product_id": "libmount",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libmount"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libmount-devel",
            "product": {
              "name": "libmount-devel",
              "product_id": "libmount-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libmount-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libsmartcols",
            "product": {
              "name": "libsmartcols",
              "product_id": "libsmartcols",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libsmartcols"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libsmartcols-devel",
            "product": {
              "name": "libsmartcols-devel",
              "product_id": "libsmartcols-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libsmartcols-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libuuid",
            "product": {
              "name": "libuuid",
              "product_id": "libuuid",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libuuid"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libuuid-devel",
            "product": {
              "name": "libuuid-devel",
              "product_id": "libuuid-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libuuid-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "python3-libmount",
            "product": {
              "name": "python3-libmount",
              "product_id": "python3-libmount",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/python3-libmount"
              }
            }
          },
          {
            "category": "product_version",
            "name": "util-linux",
            "product": {
              "name": "util-linux",
              "product_id": "util-linux",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/util-linux"
              }
            }
          },
          {
            "category": "product_version",
            "name": "util-linux-debuginfo",
            "product": {
              "name": "util-linux-debuginfo",
              "product_id": "util-linux-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/util-linux-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "util-linux",
            "product": {
              "name": "util-linux",
              "product_id": "util-linux.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/util-linux?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "uuidd",
            "product": {
              "name": "uuidd",
              "product_id": "uuidd",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/uuidd"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libblkid as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libblkid"
        },
        "product_reference": "libblkid",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libblkid-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libblkid-devel"
        },
        "product_reference": "libblkid-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libblkid-devel as a component of Red Hat Enterprise Linux 9.0",
          "product_id": "rhel-9.0:libblkid-devel"
        },
        "product_reference": "libblkid-devel",
        "relates_to_product_reference": "rhel-9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfdisk-devel as a component of Red Hat Enterprise Linux 9.0",
          "product_id": "rhel-9.0:libfdisk-devel"
        },
        "product_reference": "libfdisk-devel",
        "relates_to_product_reference": "rhel-9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmount as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libmount"
        },
        "product_reference": "libmount",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmount-devel as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8:libmount-devel"
        },
        "product_reference": "libmount-devel",
        "relates_to_product_reference": "rhel-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmount-devel as a component of Red Hat Enterprise Linux 9.0",
          "product_id": "rhel-9.0:libmount-devel"
        },
        "product_reference": "libmount-devel",
        "relates_to_product_reference": "rhel-9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmount-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libmount-devel"
        },
        "product_reference": "libmount-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsmartcols as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libsmartcols"
        },
        "product_reference": "libsmartcols",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsmartcols-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libsmartcols-devel"
        },
        "product_reference": "libsmartcols-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsmartcols-devel as a component of Red Hat Enterprise Linux 9.0",
          "product_id": "rhel-9.0:libsmartcols-devel"
        },
        "product_reference": "libsmartcols-devel",
        "relates_to_product_reference": "rhel-9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libuuid as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libuuid"
        },
        "product_reference": "libuuid",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libuuid-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libuuid-devel"
        },
        "product_reference": "libuuid-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libuuid-devel as a component of Red Hat Enterprise Linux 9.0",
          "product_id": "rhel-9.0:libuuid-devel"
        },
        "product_reference": "libuuid-devel",
        "relates_to_product_reference": "rhel-9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libmount as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8:python3-libmount"
        },
        "product_reference": "python3-libmount",
        "relates_to_product_reference": "rhel-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libmount as a component of Red Hat Enterprise Linux 9.0",
          "product_id": "rhel-9.0:python3-libmount"
        },
        "product_reference": "python3-libmount",
        "relates_to_product_reference": "rhel-9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "util-linux as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:util-linux"
        },
        "product_reference": "util-linux",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "util-linux-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:util-linux-debuginfo"
        },
        "product_reference": "util-linux-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "util-linux.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:util-linux.src"
        },
        "product_reference": "util-linux.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "util-linux.src as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8:util-linux.src"
        },
        "product_reference": "util-linux.src",
        "relates_to_product_reference": "rhel-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "util-linux.src as a component of Red Hat Enterprise Linux 9.0",
          "product_id": "rhel-9.0:util-linux.src"
        },
        "product_reference": "util-linux.src",
        "relates_to_product_reference": "rhel-9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "uuidd as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:uuidd"
        },
        "product_reference": "uuidd",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "uuidd as a component of Red Hat Enterprise Linux 9.0",
          "product_id": "rhel-9.0:uuidd"
        },
        "product_reference": "uuidd",
        "relates_to_product_reference": "rhel-9.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-37600",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2021-07-29T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-7-els.els:libblkid-devel",
            "rhel-7-els.els:libmount-devel",
            "rhel-7-els.els:libsmartcols-devel",
            "rhel-7-els.els:libuuid-devel",
            "rhel-7-els.els:util-linux-debuginfo",
            "rhel-8:libmount-devel",
            "rhel-9.0:libblkid-devel",
            "rhel-9.0:libfdisk-devel",
            "rhel-9.0:libmount-devel",
            "rhel-9.0:libsmartcols-devel",
            "rhel-9.0:libuuid-devel"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "This vulnerability is only present in the 32-bit builds of the util-linux package.  The standard 64-bit builds (eg x86_64) are not affected.  Red Hat Enterprise Linux 8 is marked \"Not Affected\" since the impacted package is not available as a 32-bit build.\n\nIn order for exploit to be possible the \"kernel.sem\" limits controlled by sysctl must be raised to an abnormally high number.  Default values on Red Hat Enterprise Linux are too low to make exploitation possible.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "An integer truncation flaw was found in util-linux that potentially causes a buffer overflow if an attacker can use system resources that lead to a large number in the /proc/sysvipc/sem file. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-7-els.els:libblkid",
          "rhel-7-els.els:libmount",
          "rhel-7-els.els:libsmartcols",
          "rhel-7-els.els:libuuid",
          "rhel-7-els.els:util-linux",
          "rhel-7-els.els:util-linux.src",
          "rhel-7-els.els:uuidd",
          "rhel-8:python3-libmount",
          "rhel-8:util-linux.src",
          "rhel-9.0:python3-libmount",
          "rhel-9.0:util-linux.src",
          "rhel-9.0:uuidd"
        ],
        "known_not_affected": [
          "rhel-7-els.els:libblkid-devel",
          "rhel-7-els.els:libmount-devel",
          "rhel-7-els.els:libsmartcols-devel",
          "rhel-7-els.els:libuuid-devel",
          "rhel-7-els.els:util-linux-debuginfo",
          "rhel-8:libmount-devel",
          "rhel-9.0:libblkid-devel",
          "rhel-9.0:libfdisk-devel",
          "rhel-9.0:libmount-devel",
          "rhel-9.0:libsmartcols-devel",
          "rhel-9.0:libuuid-devel"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-37600"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-37600"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-37600"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "rhel-7-els.els:libblkid",
            "rhel-7-els.els:libmount",
            "rhel-7-els.els:libsmartcols",
            "rhel-7-els.els:libuuid",
            "rhel-7-els.els:util-linux",
            "rhel-7-els.els:util-linux.src",
            "rhel-7-els.els:uuidd"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "rhel-8:python3-libmount",
            "rhel-8:util-linux.src"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "rhel-9.0:python3-libmount",
            "rhel-9.0:util-linux.src",
            "rhel-9.0:uuidd"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "rhel-7-els.els:libblkid",
            "rhel-7-els.els:libblkid-devel",
            "rhel-7-els.els:libmount",
            "rhel-7-els.els:libmount-devel",
            "rhel-7-els.els:libsmartcols",
            "rhel-7-els.els:libsmartcols-devel",
            "rhel-7-els.els:libuuid",
            "rhel-7-els.els:libuuid-devel",
            "rhel-7-els.els:util-linux",
            "rhel-7-els.els:util-linux-debuginfo",
            "rhel-7-els.els:util-linux.src",
            "rhel-7-els.els:uuidd",
            "rhel-8:libmount-devel",
            "rhel-8:python3-libmount",
            "rhel-8:util-linux.src",
            "rhel-9.0:libblkid-devel",
            "rhel-9.0:libfdisk-devel",
            "rhel-9.0:libmount-devel",
            "rhel-9.0:libsmartcols-devel",
            "rhel-9.0:libuuid-devel",
            "rhel-9.0:python3-libmount",
            "rhel-9.0:util-linux.src",
            "rhel-9.0:uuidd"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low",
          "product_ids": [
            "rhel-7-els.els:libblkid",
            "rhel-7-els.els:libblkid-devel",
            "rhel-7-els.els:libmount",
            "rhel-7-els.els:libmount-devel",
            "rhel-7-els.els:libsmartcols",
            "rhel-7-els.els:libsmartcols-devel",
            "rhel-7-els.els:libuuid",
            "rhel-7-els.els:libuuid-devel",
            "rhel-7-els.els:util-linux",
            "rhel-7-els.els:util-linux-debuginfo",
            "rhel-7-els.els:util-linux.src",
            "rhel-7-els.els:uuidd",
            "rhel-8:libmount-devel",
            "rhel-8:python3-libmount",
            "rhel-8:util-linux.src",
            "rhel-9.0:libblkid-devel",
            "rhel-9.0:libfdisk-devel",
            "rhel-9.0:libmount-devel",
            "rhel-9.0:libsmartcols-devel",
            "rhel-9.0:libuuid-devel",
            "rhel-9.0:python3-libmount",
            "rhel-9.0:util-linux.src",
            "rhel-9.0:uuidd"
          ]
        }
      ],
      "title": "integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c"
    }
  ]
}