ByteOS Network

NVD Vulnerability Details :

CVE-2021-28951

Modified

Source-cve@mitre.org

Published At-20 Mar, 2021 | 20:15

Updated At-07 Nov, 2023 | 03:32

An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concurrently that SQPOLL thread is waiting for a signal to start, aka CID-3ebba796fa25.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions up to 5.11.8(inclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Fedora Project

>>fedora>>32

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

Fedora Project

>>fedora>>33

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Fedora Project

>>fedora>>34

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

NetApp, Inc.

>>a250>>-

cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*

NetApp, Inc.

>>a250_firmware>>-

cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*

NetApp, Inc.

>>aff_500f>>-

cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*

NetApp, Inc.

>>aff_500f_firmware>>-

cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*

NetApp, Inc.

>>fas_500f_firmware>>-

cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*

NetApp, Inc.

>>fas_500f>>-

cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*

NetApp, Inc.

>>cloud_backup>>-

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

NetApp, Inc.

>>solidfire_baseboard_management_controller_firmware>>-

cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*

NetApp, Inc.

>>solidfire_baseboard_management_controller>>-

cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-667	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3ebba796fa251d042be42b929a2d916ee5c34a49	cve@mitre.org	Patch Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/	cve@mitre.org	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/	cve@mitre.org	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/	cve@mitre.org	N/A
https://security.netapp.com/advisory/ntap-20210430-0003/	cve@mitre.org	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History