CVE-2021-29265

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.11.7

Description The issue is related to the implementation of the usbip sockfd store function in the Linux kernel, which allows attackers to cause a denial of service due to race conditions during an update of the local and shared status. This can lead to a general protection fault (GPF). The vulnerability is caused by the use of a shared resource with incorrect synchronization.

Recommendations For Linux kernel versions prior to 5.11.7, update to version 5.11.7 or later to resolve the issue. As a temporary workaround, consider disabling the usbip sockfd store function in the drivers/usb/usbip/stub dev.c file until a patch is available. Restrict access to the vulnerable stub dev.c module to minimize the risk of exploitation.