An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS v4.0 Metrics
Exploitability
Attack VectorLocal
ComplexityLow
RequirementsPresent
PrivilegesLow
User InteractionNone
Threat
Exploit MaturityPoC
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Change Log
| Date | Source | Changes | Score |
|---|
| 2026-07-21 | PoC | E: U→P | 4.4 → 6.4 |
| 2026-07-21 | nvd | AV: P→L, AC: H→L, PR: H→L, UI: A→N, VC: N→H, VI: N→H, VA: N→H | 0.0 → 4.4 |
| 2026-07-21 | cve.org | initial, patch: Unavailable | 0.0 |
Affected Software
| Vendor | Product | Version |
|---|
| linux | linux_kernel | ≥ 4.15, < 4.19.162 |
| linux | linux_kernel | ≥ 4.20, < 5.4.82 |
| linux | linux_kernel | ≥ 5.5, < 5.9.13 |
| linux | linux_kernel | ≥ 4.5, < 4.9.248 |
| linux | linux_kernel | ≥ 2.6.12, < 4.4.248 |
| linux | linux_kernel | ≥ 4.10, < 4.14.211 |
| n/a | kernel | v5.12-rc5 |
| netapp | cloud_backup | All versions |
| netapp | h300e_firmware | All versions |
| netapp | h300s_firmware | All versions |
| netapp | h410c_firmware | All versions |
| netapp | h410s_firmware | All versions |
| netapp | h500e_firmware | All versions |
| netapp | h500s_firmware | All versions |
| netapp | h700e_firmware | All versions |
| netapp | h700s_firmware | All versions |
| netapp | solidfire_baseboard_management_controller_firmware | All versions |
Published: 2021-05-06