Sploitus

CVE-2021-27365

No indexed exploits for CVE-2021-27365 yet

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message.

Affected products
Alt Linux, Almalinux, Centos, Linuxmint, Linux Kernel, Red Hat, Red Os, Suse
Netapp Cloud Backup
All versions
Fix
Available
CVSS 3.1
7.8 HIGH
EPSS
2.1% (80th percentile)
Weakness
CWE-787
NVD status
Analyzed
Published
2021-03-07
CVE-2021-27365 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2021-27365 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2021-27365 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.