CVE-2021-4204None▾ TwilightPoC availableAn out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 2.8 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
1.2%
1 GitHub repo (last check)
An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information.
kernel Affects Linux kernel v5.8 or laterRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-87765Medium· 5.5In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index
CVE-2024-0582High· 7.8Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap
CVE-2024-0193High· 7.8Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
CVE-2023-42756Medium· 4.4Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap
CVE-2026-13087High· 8.8Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530.
CVE-2026-118593Medium· 5.9Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)