NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT
Summary
GSD-2021-1001266: NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT. Affects Kernel versions >= 9c455a8c1e146dac3a6d1405fe6a7096177b9546, < 5c7ef8a3705542136a1e19b070e951f0730b2153. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is an integral part of the Linux operating system. It provides the core functionality and acts as a bridge between the hardware and software layers. The Kernel package includes various components and subsystems, such as file systems, device drivers, and networking protocols. One of the features supported by the Kernel is NFSv4 (Network File System version 4), which allows remote file access over a network. NFSv4 includes support for parallel NFS (pNFS), which enhances performance by allowing multiple data servers to be used concurrently. However, a vulnerability has been discovered in the pnfs_mark_request_commit() function when performing O_DIRECT operations.
Vulnerability Detail
The vulnerability in pnfs_mark_request_commit() function affects NFSv4 when using O_DIRECT, which is a flag used for direct I/O operations. The issue was introduced in version v5.7 of the Linux Kernel and fixed in version v5.10.52. The vulnerability can lead to an Oops error, indicating a kernel panic or system crash. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has the potential to be exploited by attackers to disrupt system stability and availability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the pnfs_mark_request_commit() vulnerability in NFSv4 when using O_DIRECT can lead to system crashes or kernel panics. It is crucial to update the Linux Kernel package to version v5.10.52 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
NFSv4 (Network File System version 4) is a distributed file system protocol that allows remote file access over a network. It provides a transparent and secure method for accessing files on remote servers.
O_DIRECT is a flag used for direct I/O operations in Linux. It bypasses the kernel buffer cache and allows data to be read from or written directly to the disk.
pNFS (parallel NFS) is an extension to NFSv4 that allows parallel data access by utilizing multiple data servers. It improves performance by distributing the workload across multiple servers.
An Oops error is a kernel panic or system crash that occurs when the kernel encounters an unexpected condition or error. It is typically caused by a software bug or hardware issue.
You can use Vulert (https://vulert.com) to check if your system is affected by this vulnerability. Vulert is a tool that monitors and alerts in real-time for open-source vulnerabilities in software. It can analyze a manifest file like package-lock.json to determine if the vulnerability is present.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
