CVE-2021-47316

A vulnerability was found in the nfs3svc_encode_getaclres function in the Linux kernel's NFS server, where the function may encounter a NULL pointer for a directory entry (dentry), which can lead to a system crash or instability when accessed improperly.

This vulnerability is rated as a moderate severity because it does not allow unauthorized access, but can cause a NULL dereference that may crash the NFS service, disrupting file system operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.