CVE-2021-20268

State: Published
Severity: Not scored
Published: Mar 9, 2021
Updated: Aug 3, 2024
Reserved: Dec 17, 2020

Description

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Scores

The record has no CVSS score.

Weaknesses

CWE-20

Affected Products

Product	Versions
kerneln/a	kernel 5.10.10Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1923816
https://lore.kernel.org/bpf/CACAyw99bEYWJCSGqfLiJ9Jp5YE1ZsZSiJxb4RFUTwbofipf0dA%40mail.gmail.com/T/#m8929643e99bea9c18ed490a7bc2591145eac6444
https://security.netapp.com/advisory/ntap-20210409-0006/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.