SB2024050844 - Out-of-bounds read in Linux kernel NFS support

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2021-46952)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to a boundary condition within the nfs23_parse_monolithic() function in fs/nfs/fs_context.c when handling UDP retrans. A remote attacker can trigger an out-of-bounds read error and gain access to sensitive information or perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/96fa26b74cdcf9f5c98996bf36bec9fb5b19ffe2
• https://git.kernel.org/stable/c/2f3380121d49e829fb73ba86240c181bc32ad897
• https://git.kernel.org/stable/c/3d0163821c035040a46d816a42c0780f0f0a30a8
• https://git.kernel.org/stable/c/c09f11ef35955785f92369e25819bf0629df2e59