CVE-2021-47260

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47260
In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential NULL dereference in nfs_get_client() None of the callers are expecting NULL returns from nfs_get_client() so this code will lead to an Oops. It's better to return an error pointer. I expect that this is dead code so hopefully no one is affected.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0057ecef9f324007c0ba5fcca4ddd131178ce78b Patch
https://git.kernel.org/stable/c/09226e8303beeec10f2ff844d2e46d1371dc58e0 Patch
https://git.kernel.org/stable/c/279ad78a00f8b9c5ff24171a59297187a3bd44b7 Patch
https://git.kernel.org/stable/c/4b380a7d84ef2ce3f4f5bec5d8706ed937ac6502 Patch
https://git.kernel.org/stable/c/58ddf61f10b8f9b7b1341644bfee2f1c6508d4e1 Patch
https://git.kernel.org/stable/c/634f17ff1d59905eb3b4bbbc00805961d08beaee Patch
https://git.kernel.org/stable/c/a979e601000982a3ca693171a6d4dffc47f8ad00 Patch
https://git.kernel.org/stable/c/fab8bfdfb4aac9e4e8363666333adfdf21e89106 Patch
https://git.kernel.org/stable/c/0057ecef9f324007c0ba5fcca4ddd131178ce78b Patch
https://git.kernel.org/stable/c/09226e8303beeec10f2ff844d2e46d1371dc58e0 Patch
https://git.kernel.org/stable/c/279ad78a00f8b9c5ff24171a59297187a3bd44b7 Patch
https://git.kernel.org/stable/c/4b380a7d84ef2ce3f4f5bec5d8706ed937ac6502 Patch
https://git.kernel.org/stable/c/58ddf61f10b8f9b7b1341644bfee2f1c6508d4e1 Patch
https://git.kernel.org/stable/c/634f17ff1d59905eb3b4bbbc00805961d08beaee Patch
https://git.kernel.org/stable/c/a979e601000982a3ca693171a6d4dffc47f8ad00 Patch
https://git.kernel.org/stable/c/fab8bfdfb4aac9e4e8363666333adfdf21e89106 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
History

24 Dec 2024, 16:35

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
CWE CWE-476
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/0057ecef9f324007c0ba5fcca4ddd131178ce78b - () https://git.kernel.org/stable/c/0057ecef9f324007c0ba5fcca4ddd131178ce78b - Patch
References () https://git.kernel.org/stable/c/09226e8303beeec10f2ff844d2e46d1371dc58e0 - () https://git.kernel.org/stable/c/09226e8303beeec10f2ff844d2e46d1371dc58e0 - Patch
References () https://git.kernel.org/stable/c/279ad78a00f8b9c5ff24171a59297187a3bd44b7 - () https://git.kernel.org/stable/c/279ad78a00f8b9c5ff24171a59297187a3bd44b7 - Patch
References () https://git.kernel.org/stable/c/4b380a7d84ef2ce3f4f5bec5d8706ed937ac6502 - () https://git.kernel.org/stable/c/4b380a7d84ef2ce3f4f5bec5d8706ed937ac6502 - Patch
References () https://git.kernel.org/stable/c/58ddf61f10b8f9b7b1341644bfee2f1c6508d4e1 - () https://git.kernel.org/stable/c/58ddf61f10b8f9b7b1341644bfee2f1c6508d4e1 - Patch
References () https://git.kernel.org/stable/c/634f17ff1d59905eb3b4bbbc00805961d08beaee - () https://git.kernel.org/stable/c/634f17ff1d59905eb3b4bbbc00805961d08beaee - Patch
References () https://git.kernel.org/stable/c/a979e601000982a3ca693171a6d4dffc47f8ad00 - () https://git.kernel.org/stable/c/a979e601000982a3ca693171a6d4dffc47f8ad00 - Patch
References () https://git.kernel.org/stable/c/fab8bfdfb4aac9e4e8363666333adfdf21e89106 - () https://git.kernel.org/stable/c/fab8bfdfb4aac9e4e8363666333adfdf21e89106 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0057ecef9f324007c0ba5fcca4ddd131178ce78b - () https://git.kernel.org/stable/c/0057ecef9f324007c0ba5fcca4ddd131178ce78b -
References () https://git.kernel.org/stable/c/09226e8303beeec10f2ff844d2e46d1371dc58e0 - () https://git.kernel.org/stable/c/09226e8303beeec10f2ff844d2e46d1371dc58e0 -
References () https://git.kernel.org/stable/c/279ad78a00f8b9c5ff24171a59297187a3bd44b7 - () https://git.kernel.org/stable/c/279ad78a00f8b9c5ff24171a59297187a3bd44b7 -
References () https://git.kernel.org/stable/c/4b380a7d84ef2ce3f4f5bec5d8706ed937ac6502 - () https://git.kernel.org/stable/c/4b380a7d84ef2ce3f4f5bec5d8706ed937ac6502 -
References () https://git.kernel.org/stable/c/58ddf61f10b8f9b7b1341644bfee2f1c6508d4e1 - () https://git.kernel.org/stable/c/58ddf61f10b8f9b7b1341644bfee2f1c6508d4e1 -
References () https://git.kernel.org/stable/c/634f17ff1d59905eb3b4bbbc00805961d08beaee - () https://git.kernel.org/stable/c/634f17ff1d59905eb3b4bbbc00805961d08beaee -
References () https://git.kernel.org/stable/c/a979e601000982a3ca693171a6d4dffc47f8ad00 - () https://git.kernel.org/stable/c/a979e601000982a3ca693171a6d4dffc47f8ad00 -
References () https://git.kernel.org/stable/c/fab8bfdfb4aac9e4e8363666333adfdf21e89106 - () https://git.kernel.org/stable/c/fab8bfdfb4aac9e4e8363666333adfdf21e89106 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: NFS: corrija una posible desreferencia NULL en nfs_get_client() Ninguna de las personas que llaman espera retornos NULL de nfs_get_client(), por lo que este código generará un error ¡Oops! Es mejor devolver un puntero de error. Supongo que se trata de un código inactivo, así que espero que nadie se vea afectado.

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2024-12-24 16:35

NVD link : CVE-2021-47260

Mitre link : CVE-2021-47260

CVE.ORG link : CVE-2021-47260

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference