CVE-2021-29264: Medium severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled, aka CID-d8861bab48b6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.259-1Fixed in 6.1.176-1Fixed in 6.1.177-1Fixed in 6.12.94-1Fixed in 6.12.95-1Fixed in 7.1.3-1Fixed in 7.1.4-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.11.10Patch CID-d8861bab48b6
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29264?
CVE-2021-29264 has been assigned a severity rating of Medium due to its potential to cause system crashes.
How do I fix CVE-2021-29264?
To mitigate CVE-2021-29264, update the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which versions of the Linux kernel are affected by CVE-2021-29264?
CVE-2021-29264 affects the Linux kernel versions up to 5.11.10.
On which distributions is CVE-2021-29264 present?
CVE-2021-29264 is present in distributions like Debian 9.0 and versions of the Linux kernel up to 5.11.10.
What type of attack does CVE-2021-29264 enable?
CVE-2021-29264 allows attackers to cause a system crash, resulting from a negative fragment size calculated during an rx queue overrun.