Linux · Linux Kernel · CVE-2021-28950
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 5.11.8
Description:
The issue is related to a problem in the fs/fuse/fuse i.h file of the Linux kernel, where a resource is accessed through incompatible types. This can lead to a "stall on CPU" because a retry loop continually finds the same bad inode. Exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations:
For Linux kernel versions prior to 5.11.8, update to version 5.11.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the fs/fuse/fuse i.h file to minimize the risk of exploitation.