CVE-2021-47179

Commit de144ff4234f changes pnfsreturnlayout() to call pnfsmarkmatchinglsegsreturn() passing NULL as the struct pnfslayoutrange argument. Unfortunately, pnfsmarkmatchinglsegs_return() doesn't check if we have a value here before dereferencing it, causing an oops.

I'm able to hit this crash consistently when running connectathon basic tests on NFS v4.1/v4.2 against Ontap.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47179.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "4.9.269"
            },
            {
                "fixed": "4.9.271"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.14.233"
            },
            {
                "fixed": "4.14.235"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.19.191"
            },
            {
                "fixed": "4.19.193"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.4.118"
            },
            {
                "fixed": "5.4.124"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.10.36"
            },
            {
                "fixed": "5.10.42"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.12.3"
            },
            {
                "fixed": "5.12.9"
            }
        ]
    }
]