NFS: Corruption of pg_bytes_written in nfs_do_recoalesce()
Summary
UVI-2021-1000677: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce(). Affects Kernel versions >= a7d42ddb3099727f58366fa006f850a219cce6c8, < c757c1f1e65d89429db1409429436cf40d47c008. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a crucial component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware and software components. The NFS (Network File System) is a distributed file system protocol that allows remote file access over a network. It is implemented within the Kernel package and is widely used for sharing files between systems. However, a vulnerability has been discovered in the NFS module that can lead to corruption of the 'pg_bytes_written' value in the 'nfs_do_recoalesce()' function.
Vulnerability Detail
The vulnerability arises from a flaw in the 'nfs_do_recoalesce()' function, which is responsible for handling data coalescing in the NFS module. Due to improper handling of certain operations, the value of 'pg_bytes_written' can be corrupted, potentially leading to data integrity issues and unexpected behavior. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in version v4.0 of the Linux Kernel and has been fixed in version v4.14.235.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid the vulnerability by refraining from using the affected functionality or by applying patches provided by the Linux Kernel community. It is important to note that workarounds may not provide a complete solution and updating to the fixed version is the recommended approach.
Conclusion
The NFS vulnerability in the Linux Kernel's NFS module can result in the corruption of the 'pg_bytes_written' value in the 'nfs_do_recoalesce()' function. It is recommended to update the Kernel package to version v4.14.235 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The NFS module is a component of the Linux Kernel that implements the Network File System protocol. It allows remote file access over a network and is commonly used for sharing files between systems.
The NFS vulnerability can lead to corruption of the 'pg_bytes_written' value in the 'nfs_do_recoalesce()' function. This can result in data integrity issues and unexpected behavior.
To fix the NFS vulnerability, it is recommended to update the Linux Kernel package to version v4.14.235 or later. Instructions for updating the Kernel can be found in the official Git repository.
Yes, users can apply patches provided by the Linux Kernel community or avoid using the affected functionality to mitigate the NFS vulnerability. However, updating to the fixed version is the recommended approach.
For more information about the NFS vulnerability, you can refer to the source link provided in the vulnerability details section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
