Vulnerability Description
An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.1, < 5.4.106 |
| Fedoraproject | Fedora | 32 |
| Netapp | Cloud Backup | - |
| Netapp | Solidfire Baseboard Management Controller Firmware | - |
Related Weaknesses (CWE)
References
- https://git.kernel.org/linus/20c40794eb85ea29852d7bc37c55713802a543d6Mailing ListPatchVendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lore.kernel.org/stable/YD03ew7+6v0XPh6l%40kroah.com/
- https://security.netapp.com/advisory/ntap-20210401-0003/Third Party Advisory
- https://git.kernel.org/linus/20c40794eb85ea29852d7bc37c55713802a543d6Mailing ListPatchVendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lore.kernel.org/stable/YD03ew7+6v0XPh6l%40kroah.com/
- https://security.netapp.com/advisory/ntap-20210401-0003/Third Party Advisory
FAQ
What is CVE-2021-28375?
CVE-2021-28375 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85....
How severe is CVE-2021-28375?
CVE-2021-28375 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-28375?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Fedoraproject Fedora, Netapp Cloud Backup, Netapp Solidfire Baseboard Management Controller Firmware.