What’s Vulnerable › Vulnerabilities

CVE-2021-20194

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-23 · updated 2026-06-17
• Weakness: CWE-20

Description

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CONFIG_CGROUPS=y , CONFIG_CGROUP_BPF=y , CONFIG_HARDENED_USERCOPY not set, and BPF hook to getsockopt is registered). As result of BPF execution, the local user can trigger bug in __cgroup_bpf_run_filter_getsockopt() function that can lead to heap overflow (because of non-hardened usercopy). The impact of attack could be deny of service or possibly privileges escalation.

Affected products

• Linux kernel: from 5.2 (excl.)
• Red Hat Enterprise Linux: 8.0
• Red Hat OpenShift Container Platform 4.18: 4.4, 4.5, 4.6

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1912683
• https://security.netapp.com/advisory/ntap-20210326-0003/
• https://bugzilla.redhat.com/show_bug.cgi?id=1912683
• https://security.netapp.com/advisory/ntap-20210326-0003/

Get alerted when CVE-2021-20194 or the next vulnerability affects your stack