CVE - CVE-2021-47507

CVE-ID
CVE-2021-47507	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix nsfd startup race (again) Commit bd5ae9288d64 ("nfsd: register pernet ops last, unregister first") has re-opened rpc_pipefs_event() race against nfsd_net_id registration (register_pernet_subsys()) which has been fixed by commit bb7ffbf29e76 ("nfsd: fix nsfd startup race triggering BUG_ON"). Restore the order of register_pernet_subsys() vs register_cld_notifier(). Add WARN_ON() to prevent a future regression. Crash info: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000012 CPU: 8 PID: 345 Comm: mount Not tainted 5.4.144-... #1 pc : rpc_pipefs_event+0x54/0x120 [nfsd] lr : rpc_pipefs_event+0x48/0x120 [nfsd] Call trace: rpc_pipefs_event+0x54/0x120 [nfsd] blocking_notifier_call_chain rpc_fill_super get_tree_keyed rpc_fs_get_tree vfs_get_tree do_mount ksys_mount __arm64_sys_mount el0_svc_handler el0_svc
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/8bf902fee5893cfc2f04a698abab47629699ae9a URL:https://git.kernel.org/stable/c/8bf902fee5893cfc2f04a698abab47629699ae9a MISC:https://git.kernel.org/stable/c/b10252c7ae9c9d7c90552f88b544a44ee773af64 URL:https://git.kernel.org/stable/c/b10252c7ae9c9d7c90552f88b544a44ee773af64 MISC:https://git.kernel.org/stable/c/c520943a00ad5015704969ad3304c956bcd49d25 URL:https://git.kernel.org/stable/c/c520943a00ad5015704969ad3304c956bcd49d25 MISC:https://git.kernel.org/stable/c/f5734b1714ca355703e9ea8fb61d04beff1790b9 URL:https://git.kernel.org/stable/c/f5734b1714ca355703e9ea8fb61d04beff1790b9
Assigning CNA
kernel.org
Date Record Created
20240522	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240522)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)