CVE-2021-47167

NFS: Fix an Oopsable condition in __nfs_pageio_add_request()

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix an Oopsable condition in __nfs_pageio_add_request() Ensure that nfs_pageio_error_cleanup() resets the mirror array contents, so that the structure reflects the fact that it is now empty. Also change the test in nfs_pageio_do_add_request() to be more robust by checking whether or not the list is empty rather than relying on the value of pg_count.

5.5

CVSS

Severity: Medium

CVSS 3.1 •

EPSS 0.01%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/1fc5f4eb9d31268ac3ce152d74ad5501ad24ca3e	patch
https://git.kernel.org/stable/c/ee21cd3aa8548e0cbc8c67a80b62113aedd2d101	patch
https://git.kernel.org/stable/c/15ac6f14787649e8ebd75c142e2c5d2a243c8490	patch
https://git.kernel.org/stable/c/56517ab958b7c11030e626250c00b9b1a24b41eb	patch

Frequently Asked Questions

What is the severity of CVE-2021-47167?: CVE-2021-47167 has been scored as a medium severity vulnerability.
How to fix CVE-2021-47167?: To fix CVE-2021-47167, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-47167 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2021-47167 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2021-47167?: CVE-2021-47167 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.