CVE-2021-47107
kernel: NFSD: Fix READDIR buffer overflow
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 4, 2024
Updated · August 5, 2026
Description
CVE-2021-47107 is a flaw in the Linux system that runs file-sharing services (NFS). The problem happened because the system did not properly check how much data it should handle when someone asked to list the contents of a folder. If that request was made with a very small value, the system could become confused and try to use more memory than it should. This mistake could cause the computer to crash, stop responding, or even give an attacker a chance to run harmful code. The issue has since been fixed in newer versions of Linux by adding proper checks to prevent unsafe requests.
Statement
Red Hat Product Security has rated this bug as moderate as the out of box configuration of NFS protects the process from arbitrary code execution scenarios. There is a risk to availablity on successful exploitation of this bug.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-121 · Stack-based Buffer Overflow