CVE catalog
CVE-2021-3982
gnome-shell: CVE-2021-3982
- Severity
- Low
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.29% · Oct 25, 2026
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler priority leading to possible DoS of other services running in the same machine.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | gnome-shell | sid | 51.0-3 | not affected |
| Debian | gnome-shell | forky | 50.5-1 | not affected |
| Debian | gnome-shell | trixie | 48.7-0+deb13u2 | not affected |
| Debian | gnome-shell | bookworm | 43.9-0+deb12u2 | not affected |
| Debian | gnome-shell | bookworm-security | 43.9-0+deb12u2 | not affected |
| Ubuntu | gnome-shell | pro | 3.16.4-0ubuntu1 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.1-1ubuntu1 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.2-0ubuntu1 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.2-0ubuntu2 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.3-3ubuntu1 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.4-0ubuntu1 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.4-0ubuntu2 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.4-0ubuntu3 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.5-0ubuntu0.1 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.5-0ubuntu0.2 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.5-0ubuntu0.3 | vulnerable |
| Ubuntu | gnome-shell | pro | 3.18.5-0ubuntu0.3+esm1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | gnome-shell | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | gnome-shell | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | gnome-shell | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | gnome-shell | source | bookworm | Not affected | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [gnome-shell]Not affected
Details (4)
43.9-0+deb12u2· amd64 · bookwormNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· arm64 · bookwormNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· amd64 · bookworm-securityNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· arm64 · bookworm-securityNot affected
dsa · gnome-shell · debian · bookworm
- [gnome-shell-common]Not affected
Source package: [gnome-shell]
Details (4)
43.9-0+deb12u2· all · bookwormNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· all · bookwormNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· all · bookworm-securityNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· all · bookworm-securityNot affected
dsa · gnome-shell · debian · bookworm
- [gnome-shell-extension-prefs]Not affected
Source package: [gnome-shell]
Details (4)
43.9-0+deb12u2· amd64 · bookwormNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· arm64 · bookwormNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· amd64 · bookworm-securityNot affected
dsa · gnome-shell · debian · bookworm
43.9-0+deb12u2· arm64 · bookworm-securityNot affected
dsa · gnome-shell · debian · bookworm
Observed: