CVE-2021-28951: Medium severity linux kernel vulnerability
An issue was discovered in fs/iouring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concurrently that SQPOLL thread is waiting for a signal to start, aka CID-3ebba796fa25.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28951?
CVE-2021-28951 has a severity rating of medium due to its potential to cause a denial of service through deadlocks.
How do I fix CVE-2021-28951?
To mitigate CVE-2021-28951, update to a non-vulnerable version of the Linux kernel, such as versions 5.10.223-1 or newer.
Which versions of the Linux kernel are affected by CVE-2021-28951?
CVE-2021-28951 affects Linux kernel versions up to and including 5.11.8.
What products are impacted by CVE-2021-28951?
CVE-2021-28951 impacts Linux Kernel and specific versions of Fedora including 32, 33, and 34.
How does CVE-2021-28951 affect system performance?
CVE-2021-28951 can lead to system crashes or unresponsiveness due to deadlocks in the IO_uring subsystem.