Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-47168

NFS: fix an incorrect limit in filelayout_decode_layout()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer. I reversed the size of the arguments to put the variable on the left.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 16b374ca439fb406e46e071f75428f5b033056f8 to < 9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040affected
  • 16b374ca439fb406e46e071f75428f5b033056f8 to < b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1affected
  • 16b374ca439fb406e46e071f75428f5b033056f8 to < f299522eda1566cbfbae4b15c82970fc41b03714affected
  • 16b374ca439fb406e46e071f75428f5b033056f8 to < 945ebef997227ca8c20bad7f8a8358c8ee57a84aaffected
  • 16b374ca439fb406e46e071f75428f5b033056f8 to < e411df81cd862ef3d5b878120b2a2fef0ca9cdb1affected
  • 16b374ca439fb406e46e071f75428f5b033056f8 to < 9b367fe770b1b80d7bf64ed0d177544a44405f6eaffected
  • 16b374ca439fb406e46e071f75428f5b033056f8 to < d34fb628f6ef522f996205a9e578216bbee09e84affected
  • 16b374ca439fb406e46e071f75428f5b033056f8 to < 769b01ea68b6c49dc3cde6adf7e53927dacbd3a8affected

Linux Linux

Default version status: affected

  • 2.6.37affected
  • 0 to < 2.6.37unaffected
  • 4.4.271 to ≤ 4.4.*unaffected
  • 4.9.271 to ≤ 4.9.*unaffected
  • 4.14.235 to ≤ 4.14.*unaffected
  • 4.19.193 to ≤ 4.19.*unaffected
  • 5.4.124 to ≤ 5.4.*unaffected
  • 5.10.42 to ≤ 5.10.*unaffected
  • 5.12.9 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References