CVE-2021-29648: Medium severity linux kernel vulnerability
An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolvedids and resolvedsizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unexpected access attempt (in mapcreate in kernel/bpf/syscall.c or checkbtfinfo in kernel/bpf/verifier.c), aka CID-350a5c4dd245.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29648?
CVE-2021-29648 has a high severity rating due to its potential to cause system crashes.
How do I fix CVE-2021-29648?
To fix CVE-2021-29648, update the Linux kernel to version 5.11.11 or later.
What systems are affected by CVE-2021-29648?
CVE-2021-29648 affects Linux kernel versions prior to 5.11.11 and specific editions of Fedora 32, 33, and 34.
What would happen if I exploit CVE-2021-29648?
Exploiting CVE-2021-29648 could lead to a system crash due to improper access attempts in the BPF subsystem.
Is CVE-2021-29648 related to the BPF Type Format?
Yes, CVE-2021-29648 specifically involves issues within the BPF Type Format in the Linux kernel.