1. Home
  2. CVE Database
  3. CVE-2021-28951
MEDIUM · 5.5

CVE-2021-28951

An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concur...

Vulnerability Description

An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concurrently that SQPOLL thread is waiting for a signal to start, aka CID-3ebba796fa25.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
LinuxLinux Kernel<= 5.11.8
FedoraprojectFedora32
NetappA250 Firmware-
NetappA250-
NetappAff 500F Firmware-
NetappAff 500F-
NetappFas 500F Firmware-
NetappFas 500F-
NetappCloud Backup-
NetappSolidfire Baseboard Management Controller Firmware-
NetappSolidfire Baseboard Management Controller-

Related Weaknesses (CWE)

CWE-667

References

FAQ

What is CVE-2021-28951?

CVE-2021-28951 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concur...

How severe is CVE-2021-28951?

CVE-2021-28951 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-28951?

Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Fedoraproject Fedora, Netapp A250 Firmware, Netapp A250, Netapp Aff 500F Firmware.