CVE-2021-20194: Input Validation
Last updated 25 April 2025
Other sources
There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIGBPFSYSCALL=y , CONFIGBPF=y , CONFIGCGROUPS=y , CONFIGCGROUPBPF=y , CONFIGHARDENEDUSERCOPY not set, and BPF hook to getsockopt is registered). As result of BPF execution, the local user can trigger bug in cgroupbpfrunfiltergetsockopt() function that can lead to heap overflow (because of non-hardened usercopy). The impact of attack could be deny of service or possibly privileges escalation.
— Launchpad
There is vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIGBPFSYSCALL=y , CONFIGBPF=y , CONFIGCGROUPS=y , CONFIGCGROUPBPF=y , CONFIGHARDENEDUSERCOPY not set, and BPF hook to getsockopt is registered). As result of BPF execution, the local user can trigger bug in cgroupbpfrunfiltergetsockopt() function that can lead to heap overflow (because of non-hardened usercopy). The impact of attack could be deny of service or possibly privileges escalation.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-20194?
CVE-2021-20194 has a severity rating that indicates it could lead to serious security issues within the affected Linux kernel versions.
How do I fix CVE-2021-20194?
To fix CVE-2021-20194, update the Linux kernel to a version that is patched against this vulnerability, such as those mentioned in the advisory.
Which software versions are affected by CVE-2021-20194?
CVE-2021-20194 affects Linux kernel versions above 5.2 and specific versions of Red Hat OpenShift Container Platform and Red Hat Enterprise Linux.
What configurations increase the risk of CVE-2021-20194?
The risk of CVE-2021-20194 increases if the kernel is compiled with specific configuration parameters like CONFIG_BPF_SYSCALL and CONFIG_BPF.
Is CVE-2021-20194 exploitable remotely?
Yes, CVE-2021-20194 can be exploited remotely under certain conditions, making it critical to address in impacted environments.