CVE-2021-20265: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.

Affected products

• Linux Linux Kernel: affected versions not specified
• Oracle Tekelec Platform Distribution: from 7.4.0, up to and including 7.7.1

Published 2021-03-10. Last modified 2026-06-17.