CVE-2021-4157: Buffer Overflow
A flaw was found in the Linux kernel. A incorrect size check in decodenfsfh() may lead to an overwrite of 2 bytes beyond destination.
References:
https://lore.kernel.org/lkml/20210517140244.822185482@linuxfoundation.org/
Other sources
An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2021-4157?
CVE-2021-4157 has been classified as a medium severity vulnerability due to the potential for memory corruption leading to arbitrary code execution.
How do I fix CVE-2021-4157?
To remediate CVE-2021-4157, update to the patched version of the Linux kernel as indicated in the vulnerability details.
What versions of the Linux kernel are affected by CVE-2021-4157?
CVE-2021-4157 affects various versions of the Linux kernel, specifically those before 4.18.0-372.9.1.el8 and across several other version ranges.
What are the potential consequences of exploiting CVE-2021-4157?
Exploitation of CVE-2021-4157 may lead to a crash of the affected system or potentially allow an attacker to execute arbitrary code.
Is CVE-2021-4157 specific to any distribution of the Linux kernel?
Yes, CVE-2021-4157 primarily affects Red Hat-based distributions of the Linux kernel, but may impact other distributions that use vulnerable kernel versions.