CVE-2021-3347: Debian Linux

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 32 only; version 33 only
• Linux Linux Kernel: up to and including 5.10.11

Published 2021-01-29. Last modified 2026-06-17.