CVE-2021-4090

HIGH

Linux Kernel < 5.16 - Out-of-Bounds Write in NFSD Bitmap Decoding

Title source: llm
STIX 2.1

Description

An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat.

References (4)

Core 4

Scores

CVSS v3 7.1
EPSS 0.0007
EPSS Percentile 21.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Details

CWE
CWE-787
Status published
Products (11)
None/kernel kernel 5.16 rc2
linux/linux_kernel 5.16 (2 CPE variants)
linux/linux_kernel < 5.16
netapp/h300e_firmware
netapp/h300s_firmware
netapp/h410c_firmware
netapp/h410s_firmware
netapp/h500e_firmware
netapp/h500s_firmware
netapp/h700e_firmware
... and 1 more
Published Feb 18, 2022
Tracked Since Feb 18, 2026