VULNERABILITY INTELLIGENCE

CVE-2021-4157

CVSS score8 HIGH
EPSS probability1.58%
CISA KEVNot currently listed
Published2022-03-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system.

Weakness classification

  • secalert@redhat.com: CWE-119
  • nvd@nist.gov: CWE-119

Primary references