CVE-2021-20315
Medium
Description
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.
SeverityMedium
CVSS6.1
Exploit probability—
Product
Gnome-shell
PublishedFeb 18, 2022
First seenFeb 18, 2022
Weakness typeCWE-667CWE-667
How to fix
Update
- gnome gnome-shell3.32.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnome gnome-shell | v < 3.32.2 | 3.32.2 |
| centos stream | 8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.