Files
CVEs-PoC/2021/CVE-2021-47179.md
T
2024-05-25 21:48:12 +02:00

18 lines
1014 B
Markdown

### [CVE-2021-47179](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47179)
![](https://img.shields.io/static/v1?label=Product&message=Linux&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=80e34f4957ec%3C%204e1ba532dbc1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
In the Linux kernel, the following vulnerability has been resolved:NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()Commit de144ff4234f changes _pnfs_return_layout() to callpnfs_mark_matching_lsegs_return() passing NULL as the structpnfs_layout_range argument. Unfortunately,pnfs_mark_matching_lsegs_return() doesn't check if we have a value herebefore dereferencing it, causing an oops.I'm able to hit this crash consistently when running connectathon basictests on NFS v4.1/v4.2 against Ontap.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds