CVE-2021-28971: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Linux Linux Kernel: up to and including 5.11.8
• Netapp Aff 500f Firmware: affected versions not specified
• Netapp Aff a250 Firmware: affected versions not specified
• Netapp Cloud Backup: affected versions not specified
• Netapp Solidfire Baseboard Management Controller Firmware: affected versions not specified

Published 2021-03-22. Last modified 2026-06-17.