PT-2024-8915 · Linux+4 · Linux Kernel+4

J. Bruce Fields

·

Published

2024-05-24

·

Updated

2025-05-29

·

CVE-2021-47506

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to a use-after-free error due to a delegation race in the nfsd component of the Linux kernel. A delegation break could arrive as soon as vfs setlease is called, and a callback is run immediately in nfsd4 cb recall prepare, adding the delegation to del recall lru. If nfs4 set delegation exits without hashing the delegation, it will be freed as soon as the callback is done with it, without being removed from del recall lru. Symptoms show up later as use-after-free or list corruption warnings, usually in the laundromat thread. The bug may have been present since the beginning, but it is suspected that a specific commit made it easier to hit.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-10583
CVE-2021-47506
LSN-0112-1
OPENSUSE-SU-2024_2185-1
OPENSUSE-SU-2024_2189-1
OPENSUSE-SU-2024_2948-1
SUSE-SU-2024:1979-1
SUSE-SU-2024:1983-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2184-1
SUSE-SU-2024:2185-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2923-1
SUSE-SU-2024:2948-1
USN-7506-1
USN-7506-2
USN-7506-3
USN-7506-4

Affected Products

Astra Linux
Linux Kernel
Red Os
Suse
Ubuntu