CVE-2021-28950: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 33 only; version 34 only
• Linux Linux Kernel: before 5.11.8 (fixed in 5.11.8)

Published 2021-03-20. Last modified 2026-06-17.