CVE-2021-4157

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	kernel	kernel 5.13-rc1

References

https://bugzilla.redhat.com/show_bug.cgi?id=2034342Issue Tracking, Third Party Advisory
https://lore.kernel.org/lkml/20210517140244.822185482%40linuxfoundation.org/
https://security.netapp.com/advisory/ntap-20220602-0007/Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2034342Issue Tracking, Third Party Advisory
https://lore.kernel.org/lkml/20210517140244.822185482%40linuxfoundation.org/
https://security.netapp.com/advisory/ntap-20220602-0007/Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisory

Timeline

Published: Mar 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-415705.4Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup P CVE-2021-415716.5In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The CVE-2021-415736.5Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or CVE-2021-415787.8mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into CVE-2021-415797.8LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a victim to load a malicio CVE-2021-41586.0A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to cr CVE-2021-415805.3The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token. This is exploitabl CVE-2021-415815.5x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When t CVE-2021-415836.5vpn-user-portal (aka eduVPN or Let's Connect!) before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated CVE-2021-415847.5Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configura CVE-2021-415857.5Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to make the server stop CVE-2021-415867.5In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the system user password.