Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47316
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2021-47316

2024-05-2100:00:00
ubuntu.com
ubuntu.com
3
linux kernel
vulnerability
cve-2021-47316
nfsd
null dereference
fix
error cases

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: nfsd:
fix NULL dereference in nfs3svc_encode_getaclres In error cases the dentry
may be NULL. Before 20798dfe249a, the encoder also checked dentry and
d_really_is_positive(dentry), but that looks like overkill to me–zero
status should be enough to guarantee a positive dentry. This isn’t the
first time we’ve seen an error-case NULL dereference hidden in the
initialization of a local variable in an xdr encoder. But I went back
through the other recent rewrites and didn’t spot any similar bugs.

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%