CVE-2021-4090
Fixed in a distro release EPSS <1%
An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat.
Products: Linux kernel, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 5.15.5-1 |
| Debian 13 | linux | 5.15.5-1 |
| Debian 14 | linux | 5.15.5-1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-gke-4.15 | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.11 | 5.11.0-1028.31~20.04.1 |
| Ubuntu 20.04 LTS | linux-aws-5.13 | 5.13.0-1012.13~20.04.1 |
| Ubuntu 20.04 LTS | linux-aws-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.11 | 5.11.0-1028.31~20.04.2 |
| Ubuntu 20.04 LTS | linux-azure-5.13 | 5.13.0-1013.15~20.04.1 |
| Ubuntu 20.04 LTS | linux-azure-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | 5.11.0-1029.33~20.04.3 |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | 5.13.0-1013.16~20.04.1 |
| Ubuntu 20.04 LTS | linux-gcp-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | 5.13.0-28.31~20.04.1 |
| Ubuntu 20.04 LTS | linux-hwe-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-intel-5.13 | 5.13.0-1010.10 |
| Ubuntu 20.04 LTS | linux-oem-5.13 | 5.13.0-1029.36 |
| Ubuntu 20.04 LTS | linux-oem-5.14 | 5.14.0-1018.19 |
| Ubuntu 20.04 LTS | linux-oem-5.6 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.11 | 5.11.0-1028.31~20.04.1 |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | 5.13.0-1016.20~20.04.1 |
| Ubuntu 20.04 LTS | linux-oracle-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.8 | no fix |