CVE-2021-27365 – An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures …

Vuln ID: CVE-2021-27365

Published:  2021-03-07  05:15:13Z

Description: An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):