An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information.
CVE-2021-4204
CVSS base score
7.1 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-20, CWE-119
Last modified
November 2, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Affected products
linux linux kernel
debian debian linux
redhat enterprise linux
netapp h300s firmware
netapp h500s firmware
netapp h700s firmware
netapp h410s firmware
netapp h410c firmware
References
- access.redhat.com Mitigation, Third Party Advisory
- bugzilla.redhat.com Issue Tracking, Third Party Advisory
- security-tracker.debian.org Third Party Advisory
- security.netapp.com Third Party Advisory
- www.openwall.com Mailing List, Patch, Third Party Advisory
- access.redhat.com Mitigation, Third Party Advisory
- bugzilla.redhat.com Issue Tracking, Third Party Advisory
- security-tracker.debian.org Third Party Advisory
- security.netapp.com Third Party Advisory
- www.openwall.com Mailing List, Patch, Third Party Advisory