NetSight
IP …
medium6.5

CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV.

Impact

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.39 before 4.4.260
from 4.5.0 before 4.9.260
from 4.10.0 before 4.14.224
from 4.15.0 before 4.19.179
from 4.20.0 before 5.4.103
from 5.10.0 before 5.10.21
DebianDebian Linux
Version 9.0
NetappCloud Backup
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions

Weakness classification

CWE-770

References