CVE-2021-29649: Medium severity linux kernel vulnerability
Published Mar 30, 2021
·Updated
An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a copyprocess() memory leak, related to a lack of cleanup steps in kernel/usermodedriver.c and kernel/bpf/preload/bpfpreloadkern.c, aka CID-f60a85cad677.
Affected Software
5 affected componentsFixes available
Linux Linux kernel<5.11.11
Fedoraproject Fedora=32
Fedoraproject Fedora=33
Fedoraproject Fedora=34
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
Mar 30, 2021
CVE Published
via MITRE·08:36 PM
Data Sourced
via MITRE·08:36 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:56 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:31 AM
RemedyDescriptionSeverityAffected Software
Mar 27, 2025
Data Sourced
via Debian·04:22 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-29649?
CVE-2021-29649 has a medium severity rating due to the potential memory leak in the user mode driver.
2
How do I fix CVE-2021-29649?
To fix CVE-2021-29649, update your Linux kernel to version 5.11.11 or later.
3
Which Linux distributions are affected by CVE-2021-29649?
CVE-2021-29649 affects Linux kernel versions before 5.11.11 and specific Fedora versions 32, 33, and 34.
4
Is CVE-2021-29649 a denial of service vulnerability?
CVE-2021-29649 can lead to increased memory usage which may result in a denial of service under certain conditions.
5
When was CVE-2021-29649 discovered?
CVE-2021-29649 was discovered before the release of Linux kernel version 5.11.11.