Out-of-bounds Read in Linux
CVE-2021-46952
In the Linux kernel, the following vulnerability has been resolved: NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds Fix shift out-of-bounds in xprt_calc_majortimeo(). This is caused by a garbage timeout (retrans) mount option being passed to nfs mount, in this case from syzkaller. If the protocol is XPRT_TRANSPORT_UDP, then 'retrans' is a shift value for a 64-bit long integer, so 'retrans' cannot be >= 64. If it is >= 64, fail the mount and return an error.
Vulnerability class: Buffer Overflow
EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.
Affected products
- Linux — versions 9954bf92c0cddd50a2a470be302e1c1ffdf21d42, 5.6, 0
- Linux Linux_kernel
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2021-46952?
- CVE-2021-46952 is a high-severity vulnerability in Linux, classified under Out-of-bounds Read. CVSS score: 7.1/10. Published 2024-02-27.
- How severe is CVE-2021-46952?
- High severity. CVSS v3 base score is 7.1 out of 10.