Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-46952

NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds Fix shift out-of-bounds in xprt_calc_majortimeo(). This is caused by a garbage timeout (retrans) mount option being passed to nfs mount, in this case from syzkaller. If the protocol is XPRT_TRANSPORT_UDP, then 'retrans' is a shift value for a 64-bit long integer, so 'retrans' cannot be >= 64. If it is >= 64, fail the mount and return an error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9954bf92c0cddd50a2a470be302e1c1ffdf21d42 to < 96fa26b74cdcf9f5c98996bf36bec9fb5b19ffe2affected
  • 9954bf92c0cddd50a2a470be302e1c1ffdf21d42 to < 2f3380121d49e829fb73ba86240c181bc32ad897affected
  • 9954bf92c0cddd50a2a470be302e1c1ffdf21d42 to < 3d0163821c035040a46d816a42c0780f0f0a30a8affected
  • 9954bf92c0cddd50a2a470be302e1c1ffdf21d42 to < c09f11ef35955785f92369e25819bf0629df2e59affected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.36 to ≤ 5.10.*unaffected
  • 5.11.20 to ≤ 5.11.*unaffected
  • 5.12.3 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References