Riskcovery

CVE-2021-46952

NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds

State
Published
Severity
Not scored
Published
Feb 27, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds

Fix shift out-of-bounds in xprt_calc_majortimeo(). This is caused by a garbage timeout (retrans) mount option being passed to nfs mount, in this case from syzkaller.

If the protocol is XPRT_TRANSPORT_UDP, then 'retrans' is a shift value for a 64-bit long integer, so 'retrans' cannot be >= 64. If it is >= 64, fail the mount and return an error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9954bf92c0cddd50a2a470be302e1c1ffdf21d42 to before 96fa26b74cdcf9f5c98996bf36bec9fb5b19ffe2Affected
  • 9954bf92c0cddd50a2a470be302e1c1ffdf21d42 to before 2f3380121d49e829fb73ba86240c181bc32ad897Affected
  • 9954bf92c0cddd50a2a470be302e1c1ffdf21d42 to before 3d0163821c035040a46d816a42c0780f0f0a30a8Affected
  • 9954bf92c0cddd50a2a470be302e1c1ffdf21d42 to before c09f11ef35955785f92369e25819bf0629df2e59Affected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 5.10.36 through 5.10.*Not affected
  • 5.11.20 through 5.11.*Not affected
  • 5.12.3 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.