HIGH 7.8 Microsoft

CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality integrity as well as system availability.

Microsoft Security Update 2021-Mar: An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality integrity as well as system availability.

Affected Products

References

Published: 2021-03-09 · Source: Microsoft · Feed updated: 2026-08-20
This high severity vulnerability with a CVSS score of 7.8 was published on 2021-03-09 via Microsoft. Affected: kernel-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64, kernel-devel-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64, kernel-drivers-accessibility-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64 and 5 more.
vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.