What’s Vulnerable › Vulnerabilities

CVE-2021-26934

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-17 · updated 2026-06-17

Description

An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry.

Affected products

• Fedoraproject Fedora: 32, 33
• Linux kernel: from 4.18 through 5.10.16

References

• http://xenbits.xen.org/xsa/advisory-363.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GELN5E6MDR5KQBJF5M5COUUED3YFZTD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOAJBVAVR6RSCUCHNXPVSNRPSFM7INMP/
• https://security.netapp.com/advisory/ntap-20210326-0001/
• http://xenbits.xen.org/xsa/advisory-363.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GELN5E6MDR5KQBJF5M5COUUED3YFZTD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOAJBVAVR6RSCUCHNXPVSNRPSFM7INMP/
• https://security.netapp.com/advisory/ntap-20210326-0001/

Get alerted when CVE-2021-26934 or the next vulnerability affects your stack