CVE Database›Document archive›CVE-2021-47107

CVE-2021-47107

kernel: NFSD: Fix READDIR buffer overflow

Loading…

Severity

Moderate

Red Hat Product Security

7.1

CVSS 3.1

Review impact separately from score.

Published · March 4, 2024

Updated · August 5, 2026

Description

CVE-2021-47107 is a flaw in the Linux system that runs file-sharing services (NFS). The problem happened because the system did not properly check how much data it should handle when someone asked to list the contents of a folder. If that request was made with a very small value, the system could become confused and try to use more memory than it should. This mistake could cause the computer to crash, stop responding, or even give an attacker a chance to run harmful code. The issue has since been fixed in newer versions of Linux by adding proper checks to prevent unsafe requests.

Statement

Red Hat Product Security has rated this bug as moderate as the out of box configuration of NFS protects the process from arbitrary code execution scenarios. There is a risk to availablity on successful exploitation of this bug.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-121 · Stack-based Buffer Overflow