CVE-2021-28688: Medium severity Linux Linux kernel vulnerability
Last updated 25 April 2025
Other sources
The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable. XSA-365 was classified to affect versions back to at least 3.11.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28688?
CVE-2021-28688 is classified as a high severity vulnerability affecting the Linux Kernel due to potential memory corruption.
How do I fix CVE-2021-28688?
To fix CVE-2021-28688, upgrade the Linux Kernel to the recommended versions such as 5.10.223-1 or 6.1.123-1, as provided by the Debian security advisories.
Which software versions are affected by CVE-2021-28688?
CVE-2021-28688 affects Linux Kernel versions from 3.11 up to 5.10.18, as well as Debian Linux version 9.0.
What are the risks of not addressing CVE-2021-28688?
Failure to address CVE-2021-28688 may lead to potential exploitation that could compromise system integrity and lead to unauthorized access.
When was CVE-2021-28688 disclosed?
CVE-2021-28688 was disclosed on November 29, 2024, following its identification and subsequent identification related to the fix for XSA-365.