A flaw was found in the way memory resources were freed... · CVE-2021-20265 · GitHub Advisory Database · GitHub

A flaw was found in the way memory resources were freed...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 27, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.

References

Published by the National Vulnerability Database

Mar 10, 2021

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 27, 2023

Severity

Moderate

5.5

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H