VULNERABILITY INTELLIGENCE

CVE-2021-47168

CVSS score9.8 CRITICAL
EPSS probability0.77%
CISA KEVNot currently listed
Published2024-03-25
Last modified2026-08-04
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer. I reversed the size of the arguments to put the variable on the left.

Weakness classification

  • nvd@nist.gov: CWE-787

Primary references