CVE-2021-20265

EPSS 0.3%CWE-400

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 mar 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.

Productos afectados

n/a · kernel

Referencias

https://bugzilla.redhat.com/show_bug.cgi?id=1908827 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce1920e9690c7842f8fa4b https://www.oracle.com/security-alerts/cpuoct2021.html