CVE-2021-4090

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an out-of-bounds memory write flaw in the NFSD of the Linux kernel, specifically in the nfsd4 decode bitmap4() function. This flaw may allow a local attacker with user privileges to access out-of-bounds memory, posing a threat to system integrity and confidentiality. The vulnerability is caused by missing sanity checks, which may lead to a write beyond bmval[bmlen-1] in fs/nfsd/nfs4xdr.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.