PT-2021-27286

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.11 Description A buffer overflow issue in NFSD's READDIR functionality has been identified. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux...

GSD-2021-1002600 nfsd: fix use-after-free due to delegation race

nfsd: fix use-after-free due to delegation race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

GSD-2021-1002599 nfsd: Fix nsfd startup race (again)

nfsd: Fix nsfd startup race again This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit 8bf902fee5893cfc2f04a698abab47629699ae9a, it...

GSD-2021-1002520 nfsd: fix use-after-free due to delegation race

nfsd: fix use-after-free due to delegation race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002512 nfsd: Fix nsfd startup race (again)

nfsd: Fix nsfd startup race again This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit c520943a00ad5015704969ad3304c956bcd49d25, i...

GSD-2021-1002461 nfsd: Fix nsfd startup race (again)

nfsd: Fix nsfd startup race again This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.165 by commit f5734b1714ca355703e9ea8fb61d04beff1790b9, i...

PT-2021-27067

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.7 Description The issue is related to a startup race in nfsd. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.12 and fixed in version v5.15.8...

PT-2021-26929

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.102 through 5.4.164 Description The issue is related to a startup race in nfsd. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.4.102 through 5.4.164,...

PT-2021-26980

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.20 through v5.10.84 Description The issue is related to a startup race in nfsd. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.10.20 and fixed in version v5.10.85...

PT-2021-27068

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.8 Description The issue is related to a use-after-free error due to a delegation race in the nfsd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26988

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.85 Description The issue is related to a use-after-free error due to a delegation race in the nfsd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

CVE-2021-4090

An out-of-bounds OOB memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmvalbmlen-1 in nfsd4decodebitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system...

CVE-2021-4090

An out-of-bounds OOB memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmvalbmlen-1 in nfsd4decodebitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system...

UVI-2021-1002325 NFSD: Fix exposure in nfsd4_decode_bitmap()

NFSD: Fix exposure in nfsd4decodebitmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002325 NFSD: Fix exposure in nfsd4_decode_bitmap()

NFSD: Fix exposure in nfsd4decodebitmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

Fix of CVE: CVE-2021-38160, CVE-2021-3573, CVE-2021-38205, CVE-2021-3178, CVE-2021-20265, CVE-2021-3612, CVE-2021-32399, CVE-2021-37159, CVE-2014-4508, CVE-2021-28972, CVE-2021-34693, CVE-2021-20292

ELSCVE-666: CVE-2021-34693: can: bcm: fix infoleak in struct bcmmsghead - ELSCVE-705: CVE-2021-38160: virtioconsole: Assure used length from device is limited - ELSCVE-769: CVE-2014-4508: x8632, entry: Do syscall exit work on badsys CVE-2014-4508 - ELSCVE-844: CVE-2021-3573: Bluetooth: use...

Linux nfsd trace strlen Buffer Overflow DoS

The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...