ZeroDay Findings
Sign inSign up

Findings

CVE-2021-33574

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free.

Published May 25, 2021 · updated Oct 14, 2026 · gnu glibc

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

Timeline

Detection, updates, and resolution for this record.

  1. May 25, 2021 · NIST NVD

    Detected

    The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

  2. Oct 14, 2026 · NIST NVD

    Updated

    The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

Affected

  • cpe fedoraproject/fedora33
  • cpe fedoraproject/fedora34
  • cpe gnu/glibc2.32
  • cpe gnu/glibc2.33
  • cpe netapp/cloud backupversion unspecified
  • cpe netapp/e-series santricity os controllerversion unspecified
  • cpe netapp/h300e firmwareversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h500e firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • cpe netapp/solidfire baseboard management controller firmwareversion unspecified

Sources

  • CVE.orgCVE-2021-33574

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2021-33574

    The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (applicat

    nvd.nist.gov

References