CVE-2021-20315 in GNOME and CentOS Products
Published on February 18, 2022
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.
Weakness Type
Improper Locking
The software does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
Products Associated with CVE-2021-20315
stack.watch emails you whenever new vulnerabilities are published in Gnome Shell or CentOS Stream. Just hit a watch button to start following.
Exploit Probability
EPSS
0.03%
Percentile
8.06%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.