CVE-2021-28950: Medium severity linux kernel vulnerability
A denial of service in the kernel side of the FUSE functionality can allow a local system to create a denial of service.
Other sources
An issue was discovered in fs/fuse/fusei.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1.
An issue was discovered in fs/fuse/fusei.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode.
Reference and upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=775c5033a0d164622d9d10dd0f0a5531639ed3ed
— Red Hat
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2021-28950?
CVE-2021-28950 is classified as a denial of service vulnerability in the Linux kernel.
How do I fix CVE-2021-28950?
To fix CVE-2021-28950, update to the latest kernel version that is above 5.11.8 or apply the relevant patches provided by your Linux distribution.
What impact does CVE-2021-28950 have on system performance?
CVE-2021-28950 can cause a 'stall on CPU', significantly degrading system performance and leading to a denial of service.
Which systems are affected by CVE-2021-28950?
CVE-2021-28950 affects various Linux distributions running kernels prior to version 5.11.8.
Is CVE-2021-28950 a remote or local vulnerability?
CVE-2021-28950 is a local vulnerability that requires access to the system to exploit.