CVE-2021-29264: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled, aka CID-d8861bab48b6.

Affected products

  • Debian Debian Linux: version 9.0 only
  • Linux Linux Kernel: up to and including 5.11.10

Published 2021-03-26. Last modified 2026-06-17.