CVE-2021-20268CWE-20

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls…

published March 9, 2021

CVSS
—
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-03-09T17:16Z
EPSS history
Timeline
  • 09 MAR 17:16Z
    An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls…
    cvelistv5