CVE-2021-47316

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47316
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix NULL dereference in nfs3svc_encode_getaclres In error cases the dentry may be NULL. Before 20798dfe249a, the encoder also checked dentry and d_really_is_positive(dentry), but that looks like overkill to me--zero status should be enough to guarantee a positive dentry. This isn't the first time we've seen an error-case NULL dereference hidden in the initialization of a local variable in an xdr encoder. But I went back through the other recent rewrites and didn't spot any similar bugs.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/650e6f383a6eb40f7c0a010982a74ab4b6893870 Patch
https://git.kernel.org/stable/c/ab1016d39cc052064e32f25ad18ef8767a0ee3b8 Patch
https://git.kernel.org/stable/c/e79057d15d96ef19de4de6d7e479bae3d58a2a8d Patch
https://git.kernel.org/stable/c/650e6f383a6eb40f7c0a010982a74ab4b6893870 Patch
https://git.kernel.org/stable/c/ab1016d39cc052064e32f25ad18ef8767a0ee3b8 Patch
https://git.kernel.org/stable/c/e79057d15d96ef19de4de6d7e479bae3d58a2a8d Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Dec 2024, 16:28

Type Values Removed Values Added
CWE CWE-476
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/650e6f383a6eb40f7c0a010982a74ab4b6893870 - () https://git.kernel.org/stable/c/650e6f383a6eb40f7c0a010982a74ab4b6893870 - Patch
References () https://git.kernel.org/stable/c/ab1016d39cc052064e32f25ad18ef8767a0ee3b8 - () https://git.kernel.org/stable/c/ab1016d39cc052064e32f25ad18ef8767a0ee3b8 - Patch
References () https://git.kernel.org/stable/c/e79057d15d96ef19de4de6d7e479bae3d58a2a8d - () https://git.kernel.org/stable/c/e79057d15d96ef19de4de6d7e479bae3d58a2a8d - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/650e6f383a6eb40f7c0a010982a74ab4b6893870 - () https://git.kernel.org/stable/c/650e6f383a6eb40f7c0a010982a74ab4b6893870 -
References () https://git.kernel.org/stable/c/ab1016d39cc052064e32f25ad18ef8767a0ee3b8 - () https://git.kernel.org/stable/c/ab1016d39cc052064e32f25ad18ef8767a0ee3b8 -
References () https://git.kernel.org/stable/c/e79057d15d96ef19de4de6d7e479bae3d58a2a8d - () https://git.kernel.org/stable/c/e79057d15d96ef19de4de6d7e479bae3d58a2a8d -

21 Jun 2024, 14:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nfsd: corrige la desreferencia NULL en nfs3svc_encode_getaclres. En casos de error, la dentry puede ser NULL. Antes de 20798dfe249a, el codificador también verificaba dentry y d_really_is_positive(dentry), pero eso me parece excesivo: el estado cero debería ser suficiente para garantizar un dentry positivo. Esta no es la primera vez que vemos una desreferencia NULL de caso de error oculta en la inicialización de una variable local en un codificador xdr. Pero revisé las otras reescrituras recientes y no encontré ningún error similar.
References
  • () https://git.kernel.org/stable/c/e79057d15d96ef19de4de6d7e479bae3d58a2a8d -

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2024-12-24 16:28

NVD link : CVE-2021-47316

Mitre link : CVE-2021-47316

CVE.ORG link : CVE-2021-47316

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference