CVE-2021-20265 | BDVDB-2026-150248 Detail

kernel

Description#

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-400 Uncontrolled Resource Consumption

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1908827
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce1920e9690c7842f8fa4b
https://www.oracle.com/security-alerts/cpuoct2021.html

Exploit#

No public exploit known

History#

Version 12021-03-10Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.