CVE-2021-29648: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Linux Linux Kernel: before 5.11.11 (fixed in 5.11.11)

Published 2021-03-30. Last modified 2026-06-17.