{"id":"CVE-2021-46952","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: fs_context: validate UDP retrans to prevent shift out-of-bounds\n\nFix shift out-of-bounds in xprt_calc_majortimeo(). This is caused\nby a garbage timeout (retrans) mount option being passed to nfs mount,\nin this case from syzkaller.\n\nIf the protocol is XPRT_TRANSPORT_UDP, then 'retrans' is a shift\nvalue for a 64-bit long integer, so 'retrans' cannot be \u003e= 64.\nIf it is \u003e= 64, fail the mount and return an error.","modified":"2026-03-13T05:19:22.610432Z","published":"2024-02-27T19:04:06.517Z","references":[{"type":"FIX","url":"https://git.kernel.org/stable/c/c09f11ef35955785f92369e25819bf0629df2e59"},{"type":"FIX","url":"https://git.kernel.org/stable/c/2f3380121d49e829fb73ba86240c181bc32ad897"},{"type":"FIX","url":"https://git.kernel.org/stable/c/3d0163821c035040a46d816a42c0780f0f0a30a8"},{"type":"FIX","url":"https://git.kernel.org/stable/c/96fa26b74cdcf9f5c98996bf36bec9fb5b19ffe2"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"5.6.0"},{"fixed":"5.10.36"}]},{"events":[{"introduced":"5.11.0"},{"fixed":"5.11.20"}]},{"events":[{"introduced":"5.12.0"},{"fixed":"5.12.3"}]}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-46952.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}]}