CVE-2021-29265

An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70.

• CWE-362

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9380afd6df70e24eacbdbde33afc6a3950965d22Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlThird Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9380afd6df70e24eacbdbde33afc6a3950965d22Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlThird Party Advisory

Published

Mar 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29256. The Arm Mali GPU kernel driver allows an unprivileged user…8.8
• CVE-2021-29258An issue was discovered in Envoy 1.14.0. There is a remotely…7.5
• CVE-2021-29261The unofficial Svelte extension before 104.8.0 for Visual St…7.8
• CVE-2021-29262When starting Apache Solr versions prior to 8.8.2, configure…7.5
• CVE-2021-29263In JetBrains IntelliJ IDEA 2020.3.3, local code execution wa…7.8
• CVE-2021-29264An issue was discovered in the Linux kernel through 5.11.10.…5.5
• CVE-2021-29266An issue was discovered in the Linux kernel before 5.11.9. d…7.8
• CVE-2021-29267Sherlock SherlockIM through 2021-03-29 allows Cross Site Scr…6.1
• CVE-2021-29271remark42 before 1.6.1 allows XSS, as demonstrated by "Locato…6.1
• CVE-2021-29272bluemonday before 1.0.5 allows XSS because certain Go lowerc…6.1
• CVE-2021-29274Redmine 4.1.x before 4.1.2 allows XSS because an issue's sub…6.1
• CVE-2021-29279There is a integer overflow in function filter_core/filter_p…7.8