In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential NULL dereference in nfs_get_client() None of the callers are expecting NULL returns from nfs_get_client() so this code will lead to an Oops. It's better to return an error pointer. I expect that this is dead code so hopefully no one is affected.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0057ecef9f324007c0ba5fcca4ddd131178ce78b cve-icon cve-icon
https://git.kernel.org/stable/c/09226e8303beeec10f2ff844d2e46d1371dc58e0 cve-icon cve-icon
https://git.kernel.org/stable/c/279ad78a00f8b9c5ff24171a59297187a3bd44b7 cve-icon cve-icon
https://git.kernel.org/stable/c/4b380a7d84ef2ce3f4f5bec5d8706ed937ac6502 cve-icon cve-icon
https://git.kernel.org/stable/c/58ddf61f10b8f9b7b1341644bfee2f1c6508d4e1 cve-icon cve-icon
https://git.kernel.org/stable/c/634f17ff1d59905eb3b4bbbc00805961d08beaee cve-icon cve-icon
https://git.kernel.org/stable/c/a979e601000982a3ca693171a6d4dffc47f8ad00 cve-icon cve-icon
https://git.kernel.org/stable/c/fab8bfdfb4aac9e4e8363666333adfdf21e89106 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052147-CVE-2021-47260-4a4b@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47260 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47260 cve-icon
History

Tue, 24 Dec 2024 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Tue, 05 Nov 2024 08:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:19:53.375Z

Updated: 2024-12-19T07:38:25.725Z

Reserved: 2024-05-21T13:27:52.126Z

Link: CVE-2021-47260

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:07.993Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T15:15:14.690

Modified: 2024-12-24T16:35:01.477

Link: CVE-2021-47260

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47260 - Bugzilla