CVE-2021-29265 is a denial-of-service vulnerability in the Linux kernel, specifically affecting versions before 5.11.7, due to race conditions in the usbip_sockfd_store function. This flaw impacts Debian Linux and other Linux kernel distributions. Rated Medium (CVSS 4.7), this vulnerability can be exploited locally with low privileges and high attack complexity, leading to a system crash (General Protection Fault). There is no impact on confidentiality or integrity. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on the CISA KEV catalog. Community discussion and media coverage are minimal, suggesting low active exploitation or public awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.11.7CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
kernel: race conditions in usbip_sockfd_store function in drivers/usb/usbip/stub_dev.c can lead to DoS
Mar 10, 2021An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status aka CID-9380afd6df70.
Mar 9, 2021