MEDIUM 6.5 Microsoft

CVE-2021-3178

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8 when there is an NFS export of a subdirectory of a filesystem allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior

Microsoft Security Update 2021-Jan: fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8 when there is an NFS export of a subdirectory of a filesystem allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior

Affected Products

References

Published: 2021-01-12 · Source: Microsoft · Feed updated: 2026-09-07
This medium severity vulnerability with a CVSS score of 6.5 was published on 2021-01-12 via Microsoft. Affected: kernel-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64, kernel-devel-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64, kernel-drivers-accessibility-5.10.57.1-1.cm1.x86_64.rpm on CBL Mariner 1.0 x64 and 5 more.
vulnfeed aggregates 10539 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.