Vulnerabilities > CVE-2021-20265 - Memory Leak vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
linux
oracle
CWE-401
NVD
Published: 2021-03-10
Updated: 2024-11-21

Summary

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.

Vulnerable Configurations

Part Description Count
OS
Linux
1
Application
Oracle
2

Common Weakness Enumeration (CWE)

References