NetSight
IP …
critical9.8

CVE-2021-47168

In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is tw…

Impact

In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer. I reversed the size of the arguments to put the variable on the left.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.37 before 4.4.271
from 4.5 before 4.9.271
from 4.10 before 4.14.235
from 4.15 before 4.19.193
from 4.20 before 5.4.124
from 5.5 before 5.10.42

Weakness classification

CWE-787

References