What’s Vulnerable › Vulnerabilities

CVE-2021-29264

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-26 · updated 2026-06-17

Description

An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled, aka CID-d8861bab48b6.

Affected products

• Debian Linux: 9.0
• Linux kernel: through 5.11.10

References

• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d8861bab48b6c1fc3cdbcab8ff9d1eaea43afe7f
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d8861bab48b6c1fc3cdbcab8ff9d1eaea43afe7f
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html

Get alerted when CVE-2021-29264 or the next vulnerability affects your stack