High severity7.8NVD Advisory· Published Mar 26, 2021· Updated Jun 17, 2026

CVE-2021-29266

Description

An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.8,<5.10.26
- (no CPE)range: <5.11.9
Linux/Linux kerneldescription

Patches

Vulnerability mechanics

References

git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/nvdPatchVendor Advisory
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.9nvdRelease NotesVendor Advisory
security.netapp.com/advisory/ntap-20210513-0005/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000