CVE-2021-28972: linux kernel before 4.4.263 (exclusive), after 4.5 (exclusive), through 4.9.263 (inclusive), from 4.10 (inclusive)…

Affected technology

linux kernel · before 4.4.263 (exclusive)
linux

linux kernel · after 4.5 (exclusive), through 4.9.263 (inclusive)
linux

linux kernel · from 4.10 (inclusive), before 4.14.227 (exclusive)
linux

linux kernel · after 4.15 (exclusive), through 4.19.183 (inclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.108 (exclusive)
linux

linux kernel · from 5.5.0 (inclusive), before 5.10.26 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.11.9 (exclusive)
linux

fedora · 32
fedoraproject

fedora · 33
fedoraproject

fedora · 34
fedoraproject

cloud backup · Version not applicable in the source CPE
netapp

fas/aff baseboard management controller · Version not applicable in the source CPE
netapp

solidfire baseboard management controller firmware · Version not applicable in the source CPE
netapp

n/a · n/a
Vendor not specified by the source

Description’s affected range: through 5.11.8, the RPA PCI Hotplug driver

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 6.7/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.