Linux · Linux Kernel · CVE-2021-4090
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
The issue is related to an out-of-bounds memory write flaw in the NFSD of the Linux kernel, specifically in the `nfsd4 decode bitmap4()` function. This flaw may allow a local attacker with user privileges to access out-of-bounds memory, posing a threat to system integrity and confidentiality. The vulnerability is caused by missing sanity checks, which may lead to a write beyond `bmval[bmlen-1]` in `fs/nfsd/nfs4xdr.c`.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.