CVE-2021-47168
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
In the Linux kernel, the filelayout_decode_layout() function in NFS used an incorrect structure size, potentially leading to memory corruption. The fix changes the size to NFS_MAXFHSIZE, which matches the buffer size.
Risk Assessment
The vulnerability may lead to kernel memory corruption, potentially causing system crashes or privilege escalation.
Recommendation
Apply the Linux kernel update containing the fix for CVE-2021-47168.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer. I reversed the size of the arguments to put the variable on the left.