CVE-2021-47168
A bug in the Linux kernel’s NFS component could corrupt memory when handling file layouts, potentially allowing attackers to take control of the system. The flaw was caused by an incorrect size calculation that was fixed in a kernel update. Users should update to a kernel version that includes the patch.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel, including version 5.13 and other affected releases.
Real-world impact
An attacker could corrupt memory, potentially leading to arbitrary code execution or full system compromise.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited remotely without authentication and has a high impact on confidentiality, integrity, and availability.
What to do about it
- 01Upgrade to a Linux kernel version that includes the NFS fix (e.g., 5.13 or later).
- 02Restart the system to load the updated kernel.
NVD description
Timeline
- Mar 25, 2024 · Mar 25, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 21h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/769b01ea68b6c49dc3…patch
- git.kernel.org/stable/c/945ebef997227ca8c2…patch
- git.kernel.org/stable/c/9b367fe770b1b80d7b…patch
- git.kernel.org/stable/c/9d280ab53df1d4a104…patch
- git.kernel.org/stable/c/b287521e9e94bb342e…patch
- git.kernel.org/stable/c/d34fb628f6ef522f99…patch
- git.kernel.org/stable/c/e411df81cd862ef3d5…patch
- git.kernel.org/stable/c/f299522eda1566cbfb…patch