What’s Vulnerable › Vulnerabilities
CVE-2021-28375
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-03-15 · updated 2026-06-17
- Weakness: CWE-862
Description
An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.
Affected products
- Fedoraproject Fedora: 32, 33, 34
- Linux kernel: from 5.1 before 5.4.106; from 5.5 before 5.10.24; from 5.11 before 5.11.7 — fixed in 5.10.24, 5.11.7, 5.4.106
- NetApp Cloud Backup: all versions
- NetApp Solidfire Baseboard Management Controller Firmware: all versions
How to fix
Upgrade to a fixed version: Linux kernel 5.10.24, 5.11.7, 5.4.106. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/linus/20c40794eb85ea29852d7bc37c55713802a543d6
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMRQVOTASD3VZP6GE4JJHE27QU6FHTZ6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XAUNYDTGE6MB4NWL2SIHPCODCLET3JZB/
- https://lore.kernel.org/stable/YD03ew7+6v0XPh6l%40kroah.com/
- https://security.netapp.com/advisory/ntap-20210401-0003/
- https://git.kernel.org/linus/20c40794eb85ea29852d7bc37c55713802a543d6
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMRQVOTASD3VZP6GE4JJHE27QU6FHTZ6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XAUNYDTGE6MB4NWL2SIHPCODCLET3JZB/
- https://lore.kernel.org/stable/YD03ew7+6v0XPh6l%40kroah.com/
- https://security.netapp.com/advisory/ntap-20210401-0003/
Get alerted when CVE-2021-28375 or the next vulnerability affects your stack