PT-2021-2613 · Linux+3 · Linux Kernel+3

Syzbot · Published 2021-03-19 · Updated 2023-05-17 · CVE-2021-29649

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.11.11

Description An issue in the Linux kernel is related to a memory leak in the user mode driver (UMD), specifically due to a lack of cleanup steps in certain kernel files. This issue can potentially allow an attacker to cause a denial of service. The estimated number of potentially affected devices worldwide is not specified. Details about real-world incidents where this issue was exploited are not provided.

Recommendations For Linux kernel versions prior to 5.11.11, update to version 5.11.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the user mode driver (UMD) to minimize the risk of exploitation.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALT-PU-2021-1582

ALT-PU-2021-1609

ALT-PU-2021-1869

ALT-PU-2021-1888

ALT-PU-2021-1896

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

AZL-6552

BDU:2021-02103

CVE-2021-29649

USN-4948-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Ubuntu

References · 49

• https://ubuntu.com/security/CVE-2021-28688 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-6552 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28952 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-29649 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-29650 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29649 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f60a85cad677c4f9bb4cadd764f1d106c38c7cf8 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3489 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-29649 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28972 · Vendor Advisory