CVE-2021-38166EPSS p23.9%
CVE-2021-38166CVE-2021-38166
linux / linux_kernel
Description
In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.
Scoring
| CVSS | 7.8 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.32% probability of exploitation · percentile 23.9% · 2026-08-06T12:00:30Z |
| Last modified | 2026-08-05 |