Vulnerability Database

319,592

Total vulnerabilities in the database

CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

  • Published: Mar 5, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-28038
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.9
  • AV:L/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
debian / debian_linux 9.0 9.0.x
linux / linux_kernel 5.12-rc1 5.12-rc1.x
linux / linux_kernel 5.12-rc2 5.12-rc2.x
linux / linux_kernel 4.5.0 4.9.260
linux / linux_kernel 4.10.0 4.14.224
linux / linux_kernel 4.15.0 4.19.179
linux / linux_kernel 4.20.0 5.4.103
linux / linux_kernel 5.10.0 5.10.21
linux / linux_kernel 5.11.0 5.11.4
linux / linux_kernel 2.6.39 4.4.260