CVE-2021-20265

2021-03-1015:30:18

CWE-400

redhat

www.cve.org

flaw

linux kernel

memory resources

unix_stream_recvmsg

signal pending

unprivileged

system crash

available memory

system availability

AI Score

6.2

Confidence

High

EPSS

Percentile

10.3%

JSON

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Linux kernel 4.5-rc3"
      }
    ]
  }
]