NFS: Corruption of pg_bytes_written in nfs_do_recoalesce()
Summary
GSD-2021-1000601: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce(). Affects Kernel versions >= a7d42ddb3099727f58366fa006f850a219cce6c8, < 7087db95c0a06ab201b8ebfac6a7ec1e34257997. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware and software components. The NFS (Network File System) is a protocol that allows remote file access over a network. It is implemented in the Kernel package and enables file sharing between systems. The vulnerability in question affects the NFS implementation in the Kernel package.
Vulnerability Detail
The vulnerability arises in the function nfs_do_recoalesce() within the NFS implementation. It corrupts the value of pg_bytes_written, which can lead to various issues. The exact impact and plausibility of an attack are yet to be proven. The vulnerability was introduced in version v4.0 of the Linux Kernel and has been fixed in version v5.10.42 by commit 7087db95c0a06ab201b8ebfac6a7ec1e34257997. For more details, please refer to the provided references.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The NFS vulnerability in the Kernel package can lead to corruption of the pg_bytes_written value in the nfs_do_recoalesce() function. It is recommended to update the Linux Kernel package to version v5.10.42 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The NFS (Network File System) protocol is a distributed file system protocol that allows remote file access over a network. It enables sharing and accessing files between systems.
The Kernel package is a critical component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware and software components.
You can check the version of your Linux Kernel by running the command 'uname -r' in a terminal.
The actual impact and attack plausibility of this vulnerability have not yet been proven. However, it is recommended to apply the fix provided by updating the Linux Kernel package.
You can find more information about this vulnerability in the provided references and the source link of the vulnerability database.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
