CVE-2021-4090
En bref Sévérité Non disponible EPSS EPSS 0.34 % · centile 27 (2026-10-27) État PUBLISHED Publiée 2022-02-18 Mise à jour 2026-10-14 Attribuée par redhat Statut NVD Modified Description An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 6.6 AV:L/AC:L/Au:N/C:C/I:C/A:N NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* < 5.16cpe:2.3:o:linux:linux_kernel:5.16:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*Produits affectés
Références
Sources
