Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2021-47316
HistoryMay 21, 2024 - 3:15 p.m.

CVE-2021-47316

2024-05-2115:15:18
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
2
linux kernel
nfs
vulnerability

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix NULL dereference in nfs3svc_encode_getaclres

In error cases the dentry may be NULL.

Before 20798dfe249a, the encoder also checked dentry and
d_really_is_positive(dentry), but that looks like overkill to me–zero
status should be enough to guarantee a positive dentry.

This isn’t the first time we’ve seen an error-case NULL dereference
hidden in the initialization of a local variable in an xdr encoder. But
I went back through the other recent rewrites and didn’t spot any
similar bugs.

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%