CVE-2021-29266: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0.

Affected products

• Linux Linux Kernel: from 5.8, before 5.10.26 (fixed in 5.10.26); from 5.11, before 5.11.9 (fixed in 5.11.9)

Published 2021-03-26. Last modified 2026-06-17.