DirectorySecurity AdvisoriesPricing
/
Sign in
Security Advisories

CVE-2021-20265

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2021-20265

Severity

5.5

Medium

CVSS V3

Description

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.

References

  • https://nvd.nist.gov/vuln/detail/CVE-2021-20265
  • https://github.com/advisories/GHSA-7j7j-cjf4-3c2x
  • https://bugzilla.redhat.com/show_bug.cgi?id=1908827
  • https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce1920e9690c7842f8fa4b
  • https://www.oracle.com/security-alerts/cpuoct2021.html

Affected packages

The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSCMMC 2.0Golden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsSupply Chain Security 101Chainguard CoursesDocumentationTrust CenterChainguard Slack Community

Company

About UsBlogPartnersNewsroomCareersLegal