Unrated severityNVD Advisory· Published May 21, 2024· Updated May 4, 2025
NFS: Fix use-after-free in nfs4_init_client()
CVE-2021-47259
Description
In the Linux kernel, the following vulnerability has been resolved:
NFS: Fix use-after-free in nfs4_init_client()
KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server.
Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.
Affected products
69- osv-coords67 versionspkg:rpm/suse/kernel-64kb&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP3pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/kernel-docs&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_49&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_45&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/kernel-preempt&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS
< 5.3.18-150300.59.164.1+ 66 more
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.59.164.1.150300.18.96.1
- (no CPE)range: < 5.3.18-150200.24.194.1.150200.9.99.1
- (no CPE)range: < 5.3.18-150300.59.164.1.150300.18.96.1
- (no CPE)range: < 5.3.18-150300.59.164.1.150300.18.96.1
- (no CPE)range: < 5.3.18-150300.59.164.1.150300.18.96.1
- (no CPE)range: < 5.3.18-150200.24.194.1.150200.9.99.1
- (no CPE)range: < 5.3.18-150300.59.164.1.150300.18.96.1
- (no CPE)range: < 5.3.18-150200.24.194.1.150200.9.99.1
- (no CPE)range: < 5.3.18-150300.59.164.1.150300.18.96.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 1-150200.5.3.1
- (no CPE)range: < 1-150300.7.3.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.172.1
- (no CPE)range: < 5.3.18-150300.172.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.172.1
- (no CPE)range: < 5.3.18-150300.172.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150200.24.194.1
- (no CPE)range: < 5.3.18-150300.59.164.1
- (no CPE)range: < 5.3.18-150300.59.164.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- git.kernel.org/stable/c/3e3c7ebbfac152d08be75c92802a64a1f6471a15mitre
- git.kernel.org/stable/c/42c10b0db064e45f5c5ae7019bbf2168ffab766cmitre
- git.kernel.org/stable/c/476bdb04c501fc64bf3b8464ffddefc8dbe01577mitre
- git.kernel.org/stable/c/72651c6579a25317a90536181d311c663d0329abmitre
- git.kernel.org/stable/c/c3b6cf64dfe4ef96e7341508d50d6998da7062c7mitre
- git.kernel.org/stable/c/c7eab9e2d7b4e983ce280276fb920af649955897mitre
News mentions
0No linked articles in our index yet.