CVE-2021-47168

A vulnerability was found in the NFS implementation in Linux Kernel causing memory corruption due to an incorrect size limit in filelayout_decode_layout(). Using “sizeof(struct nfs_fh)” instead of NFS_MAXFHSIZE led to buffer overflow by two bytes leads to potential memory corruption.

Mitigation

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.