The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.
Base Score: 4.9
Impact Score: 6.9
Exploitability Score: 3.9
Base Score: 5.5
Impact Score: 3.6
Exploitability Score: 1.8
|151767||EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-2221)||Nessus||Huawei Local Security Checks|
|149245||Oracle Linux 6 : kernel (ELSA-2021-9212)||Nessus||Oracle Linux Local Security Checks|
|147885||CentOS 7 : kernel (CESA-2021:0856)||Nessus||CentOS Local Security Checks|
|147861||Oracle Linux 7 : kernel (ELSA-2021-0856)||Nessus||Oracle Linux Local Security Checks|
|147835||RHEL 7 : kernel (RHSA-2021:0856)||Nessus||Red Hat Local Security Checks|
|147827||RHEL 7 : kernel-rt (RHSA-2021:0857)||Nessus||Red Hat Local Security Checks|