CVE-2021-4157

Updated: 2025-08-20 02:25:17.185425

Description:

An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x HIGH 7.4
CVSS Version 3.x HIGH 8.0

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 8.0 HIGH Already Fixed 2024-05-31 10:03:27
CentOS 6 ELS kernel 2.6.32 8.0 HIGH Not Vulnerable 2022-04-13 09:59:56
CentOS 7 ELS kernel 3.10.0 8.0 HIGH Released CLSA-2024:1720468480 2024-07-23 17:19:13
CentOS 8.4 ELS kernel 4.18.0 8.0 HIGH Released CLSA-2022:1655822512 2022-06-21 11:48:07
CentOS 8.5 ELS kernel 4.18.0 8.0 HIGH Released CLSA-2022:1655821334 2022-06-21 11:48:07
CentOS Stream 8 ELS kernel 4.18.0 8.0 HIGH Already Fixed 2024-06-09 11:20:36
CloudLinux 6 ELS kernel 2.6.32 8.0 HIGH Not Vulnerable 2022-04-13 09:59:56
CloudLinux 7 ELS kernel 3.10.0 8.0 HIGH Ignored 2025-01-22 01:36:21 CloudLinux 6 and 7 support is limited and provided on demand. We strongly recommend upgrading to Clo...
Oracle Linux 6 ELS kernel 2.6.32 8.0 HIGH Not Vulnerable 2022-12-02 20:03:42
RHEL 7 ELS kernel 3.10.0 8.0 HIGH Released CLSA-2025:1750353839 2025-06-20 00:28:12
Total: 13