CVE-2021-29647

An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.

• CWE-909

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11Mailing List, Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50535249f624d0072cd885bcdce4e4b6fb770160Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11Mailing List, Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50535249f624d0072cd885bcdce4e4b6fb770160Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/

Published

Mar 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29641Directus 8 before 8.8.2 allows remote authenticated users to…8.8
• CVE-2021-29642GistPad before 0.2.7 allows a crafted workspace folder to ch…5.3
• CVE-2021-29643PRTG Network Monitor before 21.3.69.1333 allows stored XSS v…5.4
• CVE-2021-29644Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 conta…9.8
• CVE-2021-29645Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls…7.8
• CVE-2021-29646An issue was discovered in the Linux kernel before 5.11.11. …5.5
• CVE-2021-29648An issue was discovered in the Linux kernel before 5.11.11. …5.5
• CVE-2021-29649An issue was discovered in the Linux kernel before 5.11.11. …5.5
• CVE-2021-29650An issue was discovered in the Linux kernel before 5.11.11. …5.5
• CVE-2021-29651Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).6.1
• CVE-2021-29652Pomerium from version 0.10.0-0.13.3 has an Open Redirect in …6.1
• CVE-2021-29653HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under …7.5