CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

• CWE-20
• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1923816Issue Tracking, Patch, Third Party Advisory
• https://lore.kernel.org/bpf/CACAyw99bEYWJCSGqfLiJ9Jp5YE1ZsZSiJxb4RFUTwbofipf0dA%40mail.gmail.com/T/#m8929643e99bea9c18ed490a7bc2591145eac6444
• https://security.netapp.com/advisory/ntap-20210409-0006/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1923816Issue Tracking, Patch, Third Party Advisory
• https://lore.kernel.org/bpf/CACAyw99bEYWJCSGqfLiJ9Jp5YE1ZsZSiJxb4RFUTwbofipf0dA%40mail.gmail.com/T/#m8929643e99bea9c18ed490a7bc2591145eac6444
• https://security.netapp.com/advisory/ntap-20210409-0006/Third Party Advisory

Published

Mar 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20262A flaw was found in Keycloak 12.0.0 where re-authentication …6.8
• CVE-2021-20263A flaw was found in the virtio-fs shared file system daemon …3.3
• CVE-2021-20264An insecure modification flaw in the /etc/passwd file was fo…7.8
• CVE-2021-20265A flaw was found in the way memory resources were freed in t…5.5
• CVE-2021-20266A flaw was found in RPM's hdrblobInit() in lib/header.c. Thi…4.9
• CVE-2021-20267A flaw was found in openstack-neutron's default Open vSwitch…7.1
• CVE-2021-20269A flaw was found in the permissions of a log file created by…5.5
• CVE-2021-2027Vulnerability in the Oracle Marketing product of Oracle E-Bu…8.2
• CVE-2021-20270An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7…7.5
• CVE-2021-20271A flaw was found in RPM's signature check functionality when…7
• CVE-2021-20272A flaw was found in privoxy before 3.0.32. An assertion fail…7.5
• CVE-2021-20273A flaw was found in privoxy before 3.0.32. A crash can occur…7.5