Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Amir Goldstein

#45908of 53,632
5.5Total CVSS
Vulnerabilities · 1
PT-2021-2499
5.5
2021-03-04
Linux · Linux Kernel · CVE-2021-28950
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11.8 Description: The issue is related to a problem in the fs/fuse/fuse i.h file of the Linux kernel, where a resource is accessed through incompatible types. This can lead to a "stall on CPU" because a retry loop continually finds the same bad inode. Exploitation of this issue may allow an attacker to cause a denial of service. Recommendations: For Linux kernel versions prior to 5.11.8, update to version 5.11.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the fs/fuse/fuse i.h file to minimize the risk of exploitation.