https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:08:46 +0000 https://cve.radiocsirt.org/vuln/cve-2021-47259 <p><strong>Affected:</strong> Linux, linux_kernel</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>NFS: Fix use-after-free in nfs4_init_client()</p> <p>KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server.</p> <p>Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.</p> <p><strong>Affected:</strong> Linux, linux_kernel</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>NFS: Fix use-after-free in nfs4_init_client()</p> <p>KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server.</p> <p>Olga was able to hit this with kernels starting somewhere between 5.7 and 5.10, but I traced the patch that introduced the clear_bit() call to 4.13. So something must have changed in the refcounting of the clp pointer to make this call to nfs_put_client() the very last one.</p> https://cve.radiocsirt.org/vuln/cve-2021-47259