CVE-2021-47168: NFS: fix an incorrect limit in filelayout_decode_layout()
In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayoutdecodelayout()
The "sizeof(struct nfsfh)" is two bytes too large and could lead to memory corruption. It should be NFSMAXFHSIZE because that's the size of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47168?
CVE-2021-47168 has been classified as a medium severity vulnerability due to the potential for memory corruption.
How do I fix CVE-2021-47168?
To fix CVE-2021-47168, update the Linux kernel to a version that includes the patch addressing the incorrect limit in filelayout_decode_layout().
What systems are affected by CVE-2021-47168?
CVE-2021-47168 affects multiple versions of the Linux kernel, specifically versions between 2.6.37 and up to 5.13-rc3.
What type of vulnerability is CVE-2021-47168?
CVE-2021-47168 is a memory corruption vulnerability within the NFS subsystem of the Linux kernel.
What are the risks of CVE-2021-47168?
The risks associated with CVE-2021-47168 include potential crashes or unauthorized access to sensitive data due to memory corruption.