CVE-2021-20268

2021-03-0917:16:14

CWE-20

redhat

www.cve.org

linux

ebpf

code verifier

local user

privilege escalation

vulnerability

AI Score

8.8

Confidence

High

EPSS

Percentile

5.1%

JSON

An out-of-bounds access flaw was found in the Linux kernel’s implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "kernel 5.10.10"
      }
    ]
  }
]