What’s Vulnerable › Vulnerabilities
CVE-2021-47166: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-03-25 · updated 2026-06-17
- Weakness: CWE-787
Description
In the Linux kernel, the following vulnerability has been resolved: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() The value of mirror->pg_bytes_written should only be updated after a successful attempt to flush out the requests on the list.
Affected products
- Linux kernel: from 4.0 before 4.4.271; from 4.5 before 4.9.271; from 4.10 before 4.14.235; from 4.15 before 4.19.193; from 4.20 before 5.4.124; from 5.5 before 5.10.42 — fixed in 4.14.235, 4.19.193, 4.4.271, 4.9.271, 5.10.42, 5.12.9
How to fix
Upgrade to a fixed version: Linux kernel 4.14.235, 4.19.193, 4.4.271, 4.9.271. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/0d0ea309357dea0d85a82815f02157eb7fcda39f
- https://git.kernel.org/stable/c/2fe1cac336b55a1f79e603e9ce3552c3623e90eb
- https://git.kernel.org/stable/c/40f139a6d50c232c0d1fd1c5e65a845c62db0ede
- https://git.kernel.org/stable/c/7087db95c0a06ab201b8ebfac6a7ec1e34257997
- https://git.kernel.org/stable/c/785917316b25685c9b3a2a88f933139f2de75e33
- https://git.kernel.org/stable/c/b291baae24f876acd5a5dd57d0bb2bbac8a68b0c
- https://git.kernel.org/stable/c/c757c1f1e65d89429db1409429436cf40d47c008
- https://git.kernel.org/stable/c/e8b8418ce14ae66ee55179901edd12191ab06a9e
- https://git.kernel.org/stable/c/0d0ea309357dea0d85a82815f02157eb7fcda39f
- https://git.kernel.org/stable/c/2fe1cac336b55a1f79e603e9ce3552c3623e90eb
- https://git.kernel.org/stable/c/40f139a6d50c232c0d1fd1c5e65a845c62db0ede
- https://git.kernel.org/stable/c/7087db95c0a06ab201b8ebfac6a7ec1e34257997
Get alerted when CVE-2021-47166 or the next vulnerability affects your stack