CVE-2021-47179
published 2024-03-25CVE-2021-47179: In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() Commit…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.67%
48.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
Commit de144ff4234f changes _pnfs_return_layout() to call
pnfs_mark_matching_lsegs_return() passing NULL as the struct
pnfs_layout_range argument. Unfortunately,
pnfs_mark_matching_lsegs_return() doesn't check if we have a value here
before dereferencing it, causing an oops.
I'm able to hit this crash consistently when running connectathon basic
tests on NFS v4.1/v4.2 against Ontap.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2fafe7d5047f98791afd9a1d90d2afb70debc590 < f9890652185b72b8de9ebeb4406037640b6e1b53 | f9890652185b72b8de9ebeb4406037640b6e1b53 |
| linux | linux | >= 4.14.233 < 4.14.235 | 4.14.235 |
| linux | linux | >= 4.19.191 < 4.19.193 | 4.19.193 |
| linux | linux | >= 4.9.269 < 4.9.271 | 4.9.271 |
| linux | linux | >= 5.10.36 < 5.10.42 | 5.10.42 |
| linux | linux | >= 5.11.20 < 5.12 | 5.12 |
| linux | linux | >= 5.12.3 < 5.12.9 | 5.12.9 |
| linux | linux | >= 5.4.118 < 5.4.124 | 5.4.124 |
| linux | linux | >= 6be0e4b59314e4a836495f6ffdc5d2c5b079deeb < aba3c7795f51717ae316f3566442dee7cc3eeccb | aba3c7795f51717ae316f3566442dee7cc3eeccb |
| linux | linux | >= 7b7b9774643220e53eef58c15bb29bd4182fe053 < 42637ca25c7d7b5a92804a679af5192e8c1a9f48 | 42637ca25c7d7b5a92804a679af5192e8c1a9f48 |
| linux | linux | >= 7e65ea887d0c0997f3053acd91a027af45e71c5b < b090d110e66636bca473fd8b98d5c97b555a965a | b090d110e66636bca473fd8b98d5c97b555a965a |
| linux | linux | >= 80e34f4957ec3010c85f9bb0b568a8d46acdf535 < 4e1ba532dbc1a0e19fc2458d74ab8d98680c4e42 | 4e1ba532dbc1a0e19fc2458d74ab8d98680c4e42 |
| linux | linux | >= 9ffa7967f9379a0a1b924e9ffeda709d72237da7 < 39785761feadf261bc5101372b0b0bbaf6a94494 | 39785761feadf261bc5101372b0b0bbaf6a94494 |
| linux | linux | >= de144ff4234f935bd2150108019b5d87a90a8a96 < a421d218603ffa822a0b8045055c03eae394a7eb | a421d218603ffa822a0b8045055c03eae394a7eb |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 4.14.233 < 4.14.235 | 4.14.235 |
| linux | linux_kernel | >= 4.19.191 < 4.19.193 | 4.19.193 |
| linux | linux_kernel | >= 4.9.269 < 4.9.271 | 4.9.271 |
| linux | linux_kernel | >= 5.10.36 < 5.10.42 | 5.10.42 |
| linux | linux_kernel | >= 5.12.3 < 5.12.9 | 5.12.9 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
vendor_redhat·2024-03-25·CVSS 5.5
CVE-2021-47179 [MEDIUM] CWE-476 kernel: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
kernel: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
Commit de144ff4234f changes _pnfs_return_layout() to call
pnfs_mark_matching_lsegs_return() passing NULL as the struct
pnfs_layout_range argument. Unfortunately,
pnfs_mark_matching_lsegs_return() doesn't check if we have a value here
before dereferencing it, causing an oops.
I'm able to hit this crash consistently when running connectathon basic
tests on NFS v4.1/v4.2 against Ontap.
A vulnerability in the Linux kernel's NFSv4 subsystem caused a NULL pointer dereference in pnfs_mark_matching_lsegs_return(). This issue occurred because _pnfs_return_layout() passed a N
Debian
CVE-2021-47179: linux - In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix ...
vendor_debian·2021·CVSS 5.5
CVE-2021-47179 [MEDIUM] CVE-2021-47179: linux - In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix ...
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() Commit de144ff4234f changes _pnfs_return_layout() to call pnfs_mark_matching_lsegs_return() passing NULL as the struct pnfs_layout_range argument. Unfortunately, pnfs_mark_matching_lsegs_return() doesn't check if we have a value here before dereferencing it, causing an oops. I'm able to hit this crash consistently when running connectathon basic tests on NFS v4.1/v4.2 against Ontap.
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
VulDB
Linux Kernel up to 5.12.8 NFSv4 pnfs_mark_matching_lsegs_return pnfs_layout_range null pointer dereference (Nessus ID 276342 / WID-SEC-2024-0699)
vuldb·2026-08-05·CVSS 5.5
CVE-2021-47179 [MEDIUM] Linux Kernel up to 5.12.8 NFSv4 pnfs_mark_matching_lsegs_return pnfs_layout_range null pointer dereference (Nessus ID 276342 / WID-SEC-2024-0699)
A vulnerability marked as critical has been reported in Linux Kernel up to 5.12.8. This impacts the function pnfs_mark_matching_lsegs_return of the component NFSv4. The manipulation of the argument pnfs_layout_range leads to null pointer dereference.
This vulnerability is traded as CVE-2021-47179. Access to the local network is required for this attack to succeed. There is no exploit available.
It is suggested to upgrade the affected component.
OSV
CVE-2021-47179: In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() Commit
osv·2024-03-25·CVSS 5.5
CVE-2021-47179 [MEDIUM] CVE-2021-47179: In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() Commit
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() Commit de144ff4234f changes _pnfs_return_layout() to call pnfs_mark_matching_lsegs_return() passing NULL as the struct pnfs_layout_range argument. Unfortunately, pnfs_mark_matching_lsegs_return() doesn't check if we have a value here before dereferencing it, causing an oops. I'm able to hit this crash consistently when running connectathon basic tests on NFS v4.1/v4.2 against Ontap.
GHSA
GHSA-w5g2-4rxc-h7x8: In the Linux kernel, the following vulnerability has been resolved:
NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
Commi
ghsa_unreviewed·2024-03-25
CVE-2021-47179 [MEDIUM] CWE-476 GHSA-w5g2-4rxc-h7x8: In the Linux kernel, the following vulnerability has been resolved:
NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
Commi
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
Commit de144ff4234f changes _pnfs_return_layout() to call
pnfs_mark_matching_lsegs_return() passing NULL as the struct
pnfs_layout_range argument. Unfortunately,
pnfs_mark_matching_lsegs_return() doesn't check if we have a value here
before dereferencing it, causing an oops.
I'm able to hit this crash consistently when running connectathon basic
tests on NFS v4.1/v4.2 against Ontap.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/39785761feadf261bc5101372b0b0bbaf6a94494https://git.kernel.org/stable/c/42637ca25c7d7b5a92804a679af5192e8c1a9f48https://git.kernel.org/stable/c/4e1ba532dbc1a0e19fc2458d74ab8d98680c4e42https://git.kernel.org/stable/c/a421d218603ffa822a0b8045055c03eae394a7ebhttps://git.kernel.org/stable/c/aba3c7795f51717ae316f3566442dee7cc3eeccbhttps://git.kernel.org/stable/c/b090d110e66636bca473fd8b98d5c97b555a965ahttps://git.kernel.org/stable/c/f9890652185b72b8de9ebeb4406037640b6e1b53https://git.kernel.org/stable/c/39785761feadf261bc5101372b0b0bbaf6a94494https://git.kernel.org/stable/c/42637ca25c7d7b5a92804a679af5192e8c1a9f48https://git.kernel.org/stable/c/4e1ba532dbc1a0e19fc2458d74ab8d98680c4e42https://git.kernel.org/stable/c/a421d218603ffa822a0b8045055c03eae394a7ebhttps://git.kernel.org/stable/c/aba3c7795f51717ae316f3566442dee7cc3eeccbhttps://git.kernel.org/stable/c/b090d110e66636bca473fd8b98d5c97b555a965ahttps://git.kernel.org/stable/c/f9890652185b72b8de9ebeb4406037640b6e1b53
2024-03-25
Published