nfsd: fix NULL dereference in nfs3svc_encode_getaclres
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix NULL dereference in nfs3svc_encode_getaclres In error cases the dentry may be NULL. Before 20798dfe249a, the encoder also checked dentry and d_really_is_positive(dentry), but that looks like overkill to me--zero status should be enough to guarantee a positive dentry. This isn't the first time we've seen an error-case NULL dereference hidden in the initialization of a local variable in an xdr encoder. But I went back through the other recent rewrites and didn't spot any similar bugs.
CVE-2021-47316
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2021-47316
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "d505e66191072748620fc0af038cea4e4da0e3cd",
"lessThan": "e79057d15d96ef19de4de6d7e479bae3d58a2a8d",
"versionType": "git"
},
{
"status": "affected",
"version": "20798dfe249a01ad1b12eec7dbc572db5003244a",
"lessThan": "650e6f383a6eb40f7c0a010982a74ab4b6893870",
"versionType": "git"
},
{
"status": "affected",
"version": "20798dfe249a01ad1b12eec7dbc572db5003244a",
"lessThan": "ab1016d39cc052064e32f25ad18ef8767a0ee3b8",
"versionType": "git"
}
],
"programFiles": [
"fs/nfsd/nfs3acl.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.13"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.13",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.13.4",
"versionType": "semver",
"lessThanOrEqual": "5.13.*"
},
{
"status": "unaffected",
"version": "5.14",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/nfsd/nfs3acl.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2021-47316
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #21793 · Revision 1
- Added to Heist Feed
- Publisher date