CVE-2021-28375: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Linux Linux Kernel: from 5.1, before 5.4.106 (fixed in 5.4.106); from 5.5, before 5.10.24 (fixed in 5.10.24); from 5.11, before 5.11.7 (fixed in 5.11.7)
• Netapp Cloud Backup: affected versions not specified
• Netapp Solidfire Baseboard Management Controller Firmware: affected versions not specified

Published 2021-03-15. Last modified 2026-06-17.