Medium severity5.5NVD Advisory· Published Mar 30, 2021· Updated Jun 17, 2026
CVE-2021-29648
CVE-2021-29648
Description
An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Linux/Linux kerneldescription
Patches
Vulnerability mechanics
References
5- cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11nvdMailing ListPatchVendor Advisory
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/nvdMailing ListPatchVendor Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/nvd
News mentions
0No linked articles in our index yet.