high8.0
CVE-2021-4157
An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files wi…
Impact
An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 4.0 before 4.4.269 from 4.5 before 4.9.269 from 4.10 before 4.14.233 from 4.15 before 4.19.191 from 4.20 before 5.4.120 from 5.5 before 5.10.38 |
| Fedoraproject | Fedora | Version 35 |
| Netapp | H300e Firmware | All versions |
| Netapp | H300s Firmware | All versions |
| Netapp | H500e Firmware | All versions |
| Netapp | H500s Firmware | All versions |
| Netapp | H700e Firmware | All versions |
| Netapp | H700s Firmware | All versions |
| Netapp | H410s Firmware | All versions |
| Oracle | Communications Cloud Native Core Binding Support Function | Versions 22.1.1, 22.1.3, 22.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=2034342
- https://lore.kernel.org/lkml/20210517140244.822185482%40linuxfoundation.org/
- https://security.netapp.com/advisory/ntap-20220602-0007/
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2034342
- https://lore.kernel.org/lkml/20210517140244.822185482%40linuxfoundation.org/
- https://security.netapp.com/advisory/ntap-20220602-0007/
- https://www.oracle.com/security-alerts/cpujul2022.html