GSD-2021-1000678 NFS: fix an incorrect limit in filelayout_decode_layout()

Not scored Published

An incorrect limit in the NFS file layout decoder may lead to undefined behavior, requiring a kernel patch for mitigation.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
None listed

What is GSD-2021-1000678?

GSD-2021-1000678 is a vulnerability in Kernel, published on 4 Jun 2021.

Official description

NFS: fix an incorrect limit in filelayout_decode_layout()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.235 by commit f299522eda1566cbfbae4b15c82970fc41b03714, it was introduced in version v2.6.37 by commit 16b374ca439fb406e46e071f75428f5b033056f8. For more details please see the references link.

Which versions are affected by GSD-2021-1000678?

1 open source package ship an affected version, including Kernel.

PackageAffectedFixed in
Kernel LinuxAll versionsNone

How do I fix GSD-2021-1000678?

No fix has been published for GSD-2021-1000678 yet. Limit exposure of the affected software until one is available.

Is GSD-2021-1000678 being exploited?

There is no known exploitation of GSD-2021-1000678 in the wild and no public exploit code.

Sources

Is GSD-2021-1000678 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free