GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2021-47168 (GCVE-0-2021-47168)

Vulnerability from cvelistv5 – Published: 2024-03-25 09:16 – Updated: 2026-08-05 08:46
VLAI
Title
NFS: fix an incorrect limit in filelayout_decode_layout()
Summary
In the Linux kernel, the following vulnerability has been resolved: NFS: fix an incorrect limit in filelayout_decode_layout() The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer. I reversed the size of the arguments to put the variable on the left.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 15:54 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 16b374ca439fb406e46e071f75428f5b033056f8 , < 9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040 (git)
Affected: 16b374ca439fb406e46e071f75428f5b033056f8 , < b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1 (git)
Affected: 16b374ca439fb406e46e071f75428f5b033056f8 , < f299522eda1566cbfbae4b15c82970fc41b03714 (git)
Affected: 16b374ca439fb406e46e071f75428f5b033056f8 , < 945ebef997227ca8c20bad7f8a8358c8ee57a84a (git)
Affected: 16b374ca439fb406e46e071f75428f5b033056f8 , < e411df81cd862ef3d5b878120b2a2fef0ca9cdb1 (git)
Affected: 16b374ca439fb406e46e071f75428f5b033056f8 , < 9b367fe770b1b80d7bf64ed0d177544a44405f6e (git)
Affected: 16b374ca439fb406e46e071f75428f5b033056f8 , < d34fb628f6ef522f996205a9e578216bbee09e84 (git)
Affected: 16b374ca439fb406e46e071f75428f5b033056f8 , < 769b01ea68b6c49dc3cde6adf7e53927dacbd3a8 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.37
Unaffected: 0 , < 2.6.37 (semver)
Unaffected: 4.4.271 , ≤ 4.4.* (semver)
Unaffected: 4.9.271 , ≤ 4.9.* (semver)
Unaffected: 4.14.235 , ≤ 4.14.* (semver)
Unaffected: 4.19.193 , ≤ 4.19.* (semver)
Unaffected: 5.4.124 , ≤ 5.4.* (semver)
Unaffected: 5.10.42 , ≤ 5.10.* (semver)
Unaffected: 5.12.9 , ≤ 5.12.* (semver)
Unaffected: 5.13 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:24:39.927Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47168",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:54:34.857777Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:52.333Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/nfs/filelayout/filelayout.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040",
              "status": "affected",
              "version": "16b374ca439fb406e46e071f75428f5b033056f8",
              "versionType": "git"
            },
            {
              "lessThan": "b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1",
              "status": "affected",
              "version": "16b374ca439fb406e46e071f75428f5b033056f8",
              "versionType": "git"
            },
            {
              "lessThan": "f299522eda1566cbfbae4b15c82970fc41b03714",
              "status": "affected",
              "version": "16b374ca439fb406e46e071f75428f5b033056f8",
              "versionType": "git"
            },
            {
              "lessThan": "945ebef997227ca8c20bad7f8a8358c8ee57a84a",
              "status": "affected",
              "version": "16b374ca439fb406e46e071f75428f5b033056f8",
              "versionType": "git"
            },
            {
              "lessThan": "e411df81cd862ef3d5b878120b2a2fef0ca9cdb1",
              "status": "affected",
              "version": "16b374ca439fb406e46e071f75428f5b033056f8",
              "versionType": "git"
            },
            {
              "lessThan": "9b367fe770b1b80d7bf64ed0d177544a44405f6e",
              "status": "affected",
              "version": "16b374ca439fb406e46e071f75428f5b033056f8",
              "versionType": "git"
            },
            {
              "lessThan": "d34fb628f6ef522f996205a9e578216bbee09e84",
              "status": "affected",
              "version": "16b374ca439fb406e46e071f75428f5b033056f8",
              "versionType": "git"
            },
            {
              "lessThan": "769b01ea68b6c49dc3cde6adf7e53927dacbd3a8",
              "status": "affected",
              "version": "16b374ca439fb406e46e071f75428f5b033056f8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/nfs/filelayout/filelayout.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.37"
            },
            {
              "lessThan": "2.6.37",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.271",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.271",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.235",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.193",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.124",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.271",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.271",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.235",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.193",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.124",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.42",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.9",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: fix an incorrect limit in filelayout_decode_layout()\n\nThe \"sizeof(struct nfs_fh)\" is two bytes too large and could lead to\nmemory corruption.  It should be NFS_MAXFHSIZE because that\u0027s the size\nof the -\u003edata[] buffer.\n\nI reversed the size of the arguments to put the variable on the left."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The bug is reached when the NFSv4.1 pNFS filelayout client parses a LAYOUTGET layout blob from a remote metadata server over NFS/RPC; a malicious or compromised MDS (or MITM) delivers the oversized filehandle over the network.\nAC:L - The attacker fully controls the LAYOUTGET XDR and can set fh size to 129\u2013130 to pass the incorrect sizeof check and deterministically overflow; no race or special victim-side memory layout is required.\nPR:N - Exploitation requires no privileges on the victim client\u2014the attacker only needs to be (or impersonate) the NFS metadata server sending protocol responses after a normal pNFS mount/session.\nUI:N - In the highest-impact deployment\u2014an already-mounted enterprise/HPC/cloud pNFS share (fstab/autofs)\u2014routine file I/O or LAYOUTGET-on-OPEN triggers the decode path with no further interactive victim action.\nS:U - The heap overflow corrupts memory only within the client kernel\u2019s security authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:H - This is attacker-controlled heap memory corruption (OOB write of up to two bytes past the allocated nfs_fh, with oversized fh-\u003esize reused on later encode/copy paths), which can be leveraged for kernel information disclosure.\nI:H - The out-of-bounds write into the heap-allocated nfs_fh object is memory corruption suitable for adjacent-object/control-flow primitives; the same class of 1\u20132 byte NFS fh overflow (CVE-2021-4157) was assessed as privilege-escalation capable.\nA:H - Heap corruption in kernel context can cause oops/panic (and is reliably fatal under KASAN/debug allocators), fully denying availability of the client host."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:46:28.312Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040"
        },
        {
          "url": "https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1"
        },
        {
          "url": "https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714"
        },
        {
          "url": "https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a"
        },
        {
          "url": "https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1"
        },
        {
          "url": "https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e"
        },
        {
          "url": "https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84"
        },
        {
          "url": "https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8"
        }
      ],
      "title": "NFS: fix an incorrect limit in filelayout_decode_layout()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47168",
    "datePublished": "2024-03-25T09:16:20.778Z",
    "dateReserved": "2024-03-25T09:12:14.111Z",
    "dateUpdated": "2026-08-05T08:46:28.312Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-47168",
      "date": "2026-09-16",
      "epss": "0.0076",
      "percentile": "0.53524"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nNFS: fix an incorrect limit in filelayout_decode_layout()\\n\\nThe \\\"sizeof(struct nfs_fh)\\\" is two bytes too large and could lead to\\nmemory corruption.  It should be NFS_MAXFHSIZE because that\u0027s the size\\nof the -\u003edata[] buffer.\\n\\nI reversed the size of the arguments to put the variable on the left.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFS: corrige un l\\u00edmite incorrecto en filelayout_decode_layout() El \\\"sizeof(struct nfs_fh)\\\" es dos bytes demasiado grande y podr\\u00eda provocar da\\u00f1os en la memoria. Deber\\u00eda ser NFS_MAXFHSIZE porque ese es el tama\\u00f1o del b\\u00fafer -\u0026gt;datos[]. Invert\\u00ed el tama\\u00f1o de los argumentos para poner la variable a la izquierda.\"}]",
      "id": "CVE-2021-47168",
      "lastModified": "2024-11-21T06:35:32.533",
      "published": "2024-03-25T10:15:08.773",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-47168\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-03-25T10:15:08.773\",\"lastModified\":\"2026-08-04T10:16:50.143\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nNFS: fix an incorrect limit in filelayout_decode_layout()\\n\\nThe \\\"sizeof(struct nfs_fh)\\\" is two bytes too large and could lead to\\nmemory corruption.  It should be NFS_MAXFHSIZE because that\u0027s the size\\nof the -\u003edata[] buffer.\\n\\nI reversed the size of the arguments to put the variable on the left.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFS: corrige un l\u00edmite incorrecto en filelayout_decode_layout() El \\\"sizeof(struct nfs_fh)\\\" es dos bytes demasiado grande y podr\u00eda provocar da\u00f1os en la memoria. Deber\u00eda ser NFS_MAXFHSIZE porque ese es el tama\u00f1o del b\u00fafer -\u0026gt;datos[]. Invert\u00ed el tama\u00f1o de los argumentos para poner la variable a la izquierda.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/nfs/filelayout/filelayout.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"16b374ca439fb406e46e071f75428f5b033056f8\",\"lessThan\":\"9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16b374ca439fb406e46e071f75428f5b033056f8\",\"lessThan\":\"b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16b374ca439fb406e46e071f75428f5b033056f8\",\"lessThan\":\"f299522eda1566cbfbae4b15c82970fc41b03714\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16b374ca439fb406e46e071f75428f5b033056f8\",\"lessThan\":\"945ebef997227ca8c20bad7f8a8358c8ee57a84a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16b374ca439fb406e46e071f75428f5b033056f8\",\"lessThan\":\"e411df81cd862ef3d5b878120b2a2fef0ca9cdb1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16b374ca439fb406e46e071f75428f5b033056f8\",\"lessThan\":\"9b367fe770b1b80d7bf64ed0d177544a44405f6e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16b374ca439fb406e46e071f75428f5b033056f8\",\"lessThan\":\"d34fb628f6ef522f996205a9e578216bbee09e84\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"16b374ca439fb406e46e071f75428f5b033056f8\",\"lessThan\":\"769b01ea68b6c49dc3cde6adf7e53927dacbd3a8\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/nfs/filelayout/filelayout.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.37\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.37\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.4.271\",\"lessThanOrEqual\":\"4.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.9.271\",\"lessThanOrEqual\":\"4.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.235\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.193\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.124\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.42\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.12.9\",\"lessThanOrEqual\":\"5.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T15:54:34.857777Z\",\"id\":\"CVE-2021-47168\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.37\",\"versionEndExcluding\":\"4.4.271\",\"matchCriteriaId\":\"AA9C0516-0AB8-4BC5-8058-1896E469EB2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.5\",\"versionEndExcluding\":\"4.9.271\",\"matchCriteriaId\":\"1E7DAE3A-78E9-45DB-96D8-4541CD7DC26B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.14.235\",\"matchCriteriaId\":\"03A23445-0C1A-42AB-AC5C-768360DDF32C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.193\",\"matchCriteriaId\":\"C8DEF3EC-88D9-4B89-8CF9-64BD6C863C9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.124\",\"matchCriteriaId\":\"06FE0F99-F7A9-462A-8355-30E2EDA9826B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.42\",\"matchCriteriaId\":\"C3E7E799-1C8A-45FB-9E07-4731996144C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.12.9\",\"matchCriteriaId\":\"2C8A1D02-81A7-44E5-ACFD-CC6A6694F930\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"96AC23B2-D46A-49D9-8203-8E1BEDCA8532\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA610E30-717C-4700-9F77-A3C9244F3BFD\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-14T18:49:50+00:00",
      "cve": "CVE-2021-47168",
      "id": "CVE-2021-47168",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_affected": "90",
      "product_status:known_not_affected": "108",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: NFS: fix an incorrect limit in filelayout_decode_layout()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-47168.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T02:31:28Z",
      "cve": "CVE-2021-47168",
      "id": "CVE-2021-47168",
      "initial_release_date": "2024-03-27T04:25:58Z",
      "product_status:known_affected": "535",
      "product_status:known_not_affected": "196",
      "product_status:recommended": "221",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2021-47168",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-47168.json",
      "version": "55"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:24:39.927Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47168\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:54:34.857777Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:19.338Z\"}}], \"cna\": {\"title\": \"NFS: fix an incorrect limit in filelayout_decode_layout()\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:N - The bug is reached when the NFSv4.1 pNFS filelayout client parses a LAYOUTGET layout blob from a remote metadata server over NFS/RPC; a malicious or compromised MDS (or MITM) delivers the oversized filehandle over the network.\\nAC:L - The attacker fully controls the LAYOUTGET XDR and can set fh size to 129\\u2013130 to pass the incorrect sizeof check and deterministically overflow; no race or special victim-side memory layout is required.\\nPR:N - Exploitation requires no privileges on the victim client\\u2014the attacker only needs to be (or impersonate) the NFS metadata server sending protocol responses after a normal pNFS mount/session.\\nUI:N - In the highest-impact deployment\\u2014an already-mounted enterprise/HPC/cloud pNFS share (fstab/autofs)\\u2014routine file I/O or LAYOUTGET-on-OPEN triggers the decode path with no further interactive victim action.\\nS:U - The heap overflow corrupts memory only within the client kernel\\u2019s security authority and does not cross a VM, IOMMU, or sandbox boundary.\\nC:H - This is attacker-controlled heap memory corruption (OOB write of up to two bytes past the allocated nfs_fh, with oversized fh-\u003esize reused on later encode/copy paths), which can be leveraged for kernel information disclosure.\\nI:H - The out-of-bounds write into the heap-allocated nfs_fh object is memory corruption suitable for adjacent-object/control-flow primitives; the same class of 1\\u20132 byte NFS fh overflow (CVE-2021-4157) was assessed as privilege-escalation capable.\\nA:H - Heap corruption in kernel context can cause oops/panic (and is reliably fatal under KASAN/debug allocators), fully denying availability of the client host.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"16b374ca439fb406e46e071f75428f5b033056f8\", \"lessThan\": \"9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16b374ca439fb406e46e071f75428f5b033056f8\", \"lessThan\": \"b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16b374ca439fb406e46e071f75428f5b033056f8\", \"lessThan\": \"f299522eda1566cbfbae4b15c82970fc41b03714\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16b374ca439fb406e46e071f75428f5b033056f8\", \"lessThan\": \"945ebef997227ca8c20bad7f8a8358c8ee57a84a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16b374ca439fb406e46e071f75428f5b033056f8\", \"lessThan\": \"e411df81cd862ef3d5b878120b2a2fef0ca9cdb1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16b374ca439fb406e46e071f75428f5b033056f8\", \"lessThan\": \"9b367fe770b1b80d7bf64ed0d177544a44405f6e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16b374ca439fb406e46e071f75428f5b033056f8\", \"lessThan\": \"d34fb628f6ef522f996205a9e578216bbee09e84\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"16b374ca439fb406e46e071f75428f5b033056f8\", \"lessThan\": \"769b01ea68b6c49dc3cde6adf7e53927dacbd3a8\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/nfs/filelayout/filelayout.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.37\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.37\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.4.271\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.4.*\"}, {\"status\": \"unaffected\", \"version\": \"4.9.271\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.235\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.193\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.124\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.42\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.12.9\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.12.*\"}, {\"status\": \"unaffected\", \"version\": \"5.13\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/nfs/filelayout/filelayout.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040\"}, {\"url\": \"https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1\"}, {\"url\": \"https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714\"}, {\"url\": \"https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a\"}, {\"url\": \"https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1\"}, {\"url\": \"https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e\"}, {\"url\": \"https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84\"}, {\"url\": \"https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nNFS: fix an incorrect limit in filelayout_decode_layout()\\n\\nThe \\\"sizeof(struct nfs_fh)\\\" is two bytes too large and could lead to\\nmemory corruption.  It should be NFS_MAXFHSIZE because that\u0027s the size\\nof the -\u003edata[] buffer.\\n\\nI reversed the size of the arguments to put the variable on the left.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.4.271\", \"versionStartIncluding\": \"2.6.37\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.271\", \"versionStartIncluding\": \"2.6.37\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.235\", \"versionStartIncluding\": \"2.6.37\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.193\", \"versionStartIncluding\": \"2.6.37\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.124\", \"versionStartIncluding\": \"2.6.37\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.42\", \"versionStartIncluding\": \"2.6.37\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.12.9\", \"versionStartIncluding\": \"2.6.37\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.13\", \"versionStartIncluding\": \"2.6.37\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T08:46:28.312Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47168\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T08:46:28.312Z\", \"dateReserved\": \"2024-03-25T09:12:14.111Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-03-25T09:16:20.778Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.