The vulnerability in the implementation of the dev_map_init_map and sock_map_alloc functions in the Linux kernel allows a hacker to trigger a system crash or enhance their privileges.

🗓️ 30 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Linux kernel vulnerability in dev_map_init_map and sock_map_alloc due to poor input validation; may crash or escalate privileges.

Reporter	Title	Published	Views	Family All 182
Android Security Bulletins	Pixel Update Bulletin—June 2022Stay organized with collectionsSave and categorize content based on your preferences.	6 Jun 202200:00	–	androidsecurity
CBLMariner	CVE-2021-20268 affecting package kernel 5.4.91-6	25 Aug 202119:57	–	cbl_mariner
CNNVD	Linux kernel 输入验证错误漏洞	9 Mar 202100:00	–	cnnvd
CNVD	Linux kernel input validation error vulnerability (CNVD-2021-21917)	12 Mar 202100:00	–	cnvd
CVE	CVE-2021-20268	9 Mar 202117:16	–	cve
Cvelist	CVE-2021-20268	9 Mar 202117:16	–	cvelist
Debian CVE	CVE-2021-20268	9 Mar 202117:16	–	debiancve
EUVD	EUVD-2021-7703	3 Oct 202520:07	–	euvd
F5 Networks	K93048305: Linux kernel vulnerability CVE-2021-20268	21 Feb 202319:42	–	f5
Microsoft CVE	An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality integrity as well as system availability.	25 Mar 202107:00	–	mscve

Vulners

Node

red_hat openshift_container_platformMatch4.4linux

OR

red_hat openshift_container_platformMatch4.5linux

OR

red_hat openshift_container_platformMatch4.6linux

OR

red_hat openshift_container_platformMatch4.7linux

OR

red_hat red_hat_enterprise_linuxMatch8

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/bc895e8b2a64e502fbba72748d59618272052a8b
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.10
lkml	www.lkml.org/lkml/2021/1/26/735
lore	www.lore.kernel.org/bpf/CACAyw99bEYWJCSGqfLiJ9Jp5YE1ZsZSiJxb4RFUTwbofipf0dA%40mail.gmail.com/T/
lore	www.lore.kernel.org/bpf/CACAyw99bEYWJCSGqfLiJ9Jp5YE1ZsZSiJxb4RFUTwbofipf0dA@mail.gmail.com/T/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-20268
security	www.security.netapp.com/advisory/ntap-20210409-0006/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-20268

04 Dec 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.6

CVSS 37.8

EPSS0.00133

linux kernel dev map init map sock map alloc input validation privilege escalation system crash