CVE-2021-47168
published 2024-03-25CVE-2021-47168: In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is…
PriorityP423medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.76%
51.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs_fh)" is two bytes too large and could lead to
memory corruption. It should be NFS_MAXFHSIZE because that's the size
of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 16b374ca439fb406e46e071f75428f5b033056f8 < 9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040 | 9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040 |
| linux | linux | >= 16b374ca439fb406e46e071f75428f5b033056f8 < b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1 | b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1 |
| linux | linux | >= 16b374ca439fb406e46e071f75428f5b033056f8 < f299522eda1566cbfbae4b15c82970fc41b03714 | f299522eda1566cbfbae4b15c82970fc41b03714 |
| linux | linux | >= 16b374ca439fb406e46e071f75428f5b033056f8 < 945ebef997227ca8c20bad7f8a8358c8ee57a84a | 945ebef997227ca8c20bad7f8a8358c8ee57a84a |
| linux | linux | >= 16b374ca439fb406e46e071f75428f5b033056f8 < e411df81cd862ef3d5b878120b2a2fef0ca9cdb1 | e411df81cd862ef3d5b878120b2a2fef0ca9cdb1 |
| linux | linux | >= 16b374ca439fb406e46e071f75428f5b033056f8 < 9b367fe770b1b80d7bf64ed0d177544a44405f6e | 9b367fe770b1b80d7bf64ed0d177544a44405f6e |
| linux | linux | >= 16b374ca439fb406e46e071f75428f5b033056f8 < d34fb628f6ef522f996205a9e578216bbee09e84 | d34fb628f6ef522f996205a9e578216bbee09e84 |
| linux | linux | >= 16b374ca439fb406e46e071f75428f5b033056f8 < 769b01ea68b6c49dc3cde6adf7e53927dacbd3a8 | 769b01ea68b6c49dc3cde6adf7e53927dacbd3a8 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 2.6.37 < 4.4.271 | 4.4.271 |
| linux | linux_kernel | >= 4.10 < 4.14.235 | 4.14.235 |
| linux | linux_kernel | >= 4.15 < 4.19.193 | 4.19.193 |
| linux | linux_kernel | >= 4.20 < 5.4.124 | 5.4.124 |
| linux | linux_kernel | >= 4.5 < 4.9.271 | 4.9.271 |
| linux | linux_kernel | >= 5.11 < 5.12.9 | 5.12.9 |
| linux | linux_kernel | >= 5.5 < 5.10.42 | 5.10.42 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.12.8 NFS filelayout_decode_layout memory corruption (Nessus ID 239742 / WID-SEC-2024-0699)
vuldb·2026-08-05·CVSS 5.5
CVE-2021-47168 [MEDIUM] Linux Kernel up to 5.12.8 NFS filelayout_decode_layout memory corruption (Nessus ID 239742 / WID-SEC-2024-0699)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.12.8. Affected by this vulnerability is the function filelayout_decode_layout of the component NFS. Such manipulation leads to memory corruption.
This vulnerability is referenced as CVE-2021-47168. The attack needs to be initiated within the local network. No exploit is available.
You should upgrade the affected component.
OSV
CVE-2021-47168: In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_f
osv·2024-03-25·CVSS 5.5
CVE-2021-47168 [MEDIUM] CVE-2021-47168: In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_f
In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer. I reversed the size of the arguments to put the variable on the left.
GHSA
GHSA-8229-hhm6-4mmc: In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs
ghsa_unreviewed·2024-03-25
CVE-2021-47168 [MEDIUM] CWE-787 GHSA-8229-hhm6-4mmc: In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs
In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs_fh)" is two bytes too large and could lead to
memory corruption. It should be NFS_MAXFHSIZE because that's the size
of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
Red Hat
kernel: NFS: fix an incorrect limit in filelayout_decode_layout()
vendor_redhat·2024-03-25·CVSS 5.5
CVE-2021-47168 [MEDIUM] CWE-99 kernel: NFS: fix an incorrect limit in filelayout_decode_layout()
kernel: NFS: fix an incorrect limit in filelayout_decode_layout()
In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs_fh)" is two bytes too large and could lead to
memory corruption. It should be NFS_MAXFHSIZE because that's the size
of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
A vulnerability was found in the NFS implementation in Linux Kernel causing memory corruption due to an incorrect size limit in filelayout_decode_layout(). Using "sizeof(struct nfs_fh)" instead of NFS_MAXFHSIZE led to buffer overflow by two bytes leads to potential memory corruption.
Mitigation: Red Hat has investigated whether a possible mitigation exists for this issu
Debian
CVE-2021-47168: linux - In the Linux kernel, the following vulnerability has been resolved: NFS: fix an...
vendor_debian·2021·CVSS 5.5
CVE-2021-47168 [MEDIUM] CVE-2021-47168: linux - In the Linux kernel, the following vulnerability has been resolved: NFS: fix an...
In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer. I reversed the size of the arguments to put the variable on the left.
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84ahttps://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6ehttps://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84ahttps://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6ehttps://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714
2024-03-25
Published