NFS: Corruption of pg_bytes_written in nfs_do_recoalesce()
Summary
GSD-2021-1000659: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce(). Affects Kernel versions >= a7d42ddb3099727f58366fa006f850a219cce6c8, < 40f139a6d50c232c0d1fd1c5e65a845c62db0ede. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system, responsible for managing the system's core functionality. It provides essential services such as process management, memory management, and device drivers. The NFS (Network File System) is a distributed file system protocol that allows remote file access over a network. It is commonly used for sharing files between systems in a networked environment.
Vulnerability Detail
The vulnerability in question arises in the nfs_do_recoalesce() function within the NFS implementation. It involves the corruption of the value of pg_bytes_written, which can lead to various issues. While the exact impact and attack plausibility have not been proven, this vulnerability has the potential to compromise the integrity and reliability of the NFS system. It was introduced in version v4.0 of the Linux Kernel and has been fixed in version v4.19.193.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the NFS vulnerability in the Linux Kernel, specifically in the nfs_do_recoalesce() function, can lead to the corruption of pg_bytes_written and potential issues within the NFS system. It is crucial to update the Linux Kernel to version v4.19.193 or later to mitigate this vulnerability. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing essential services.
NFS (Network File System) is a distributed file system protocol that allows remote file access over a network.
The nfs_do_recoalesce() function is part of the NFS implementation in the Linux Kernel and is responsible for handling data coalescing operations.
pg_bytes_written is a value used in the NFS system to track the number of bytes written to the network.
You can use the Vulert playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
