The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-core | Jan 26, 2023 | Nov 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfo | Mar 22, 2023 | Nov 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | Oct 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1 | Jan 24, 2023 | Nov 4, 2022 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Nov 4, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 25, 2023 | Oct 3, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 14, 2022 | Nov 4, 2022 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfo | Apr 18, 2024 | Nov 4, 2022 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade kernel-preempt-optionalUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-kvmsmall-baseUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-preempt-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-debugUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-default-livepatchUpgrade kernel-vanilla-develUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dlm-kmp-preemptUpgrade dtb-zteUpgrade dtb-freescaleUpgrade kernel-vanillaUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-64kbUpgrade dtb-alUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-develUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-preemptUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rtUpgrade kselftests-kmp-64kb | Dec 19, 2022 | Nov 4, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1094-awsUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1029-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-5.19.0-1013-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-56-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1014-awsUpgrade linux-image-5.15.0-1026-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1024-kvmUpgrade linux-image-5.15.0-1021-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.19.0-1013-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-5.17.0-1024-oemUpgrade linux-image-dell300xUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-gkeUpgrade linux-image-5.19.0-26-genericUpgrade linux-image-5.19.0-26-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1101-azureUpgrade linux-image-bluefieldUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.19.0-1009-raspi-nolpaeUpgrade linux-image-5.19.0-1013-ibmUpgrade linux-image-5.19.0-1009-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-5.19.0-26-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1148-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-236-genericUpgrade linux-image-5.15.0-56-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.15.0-56-generic-64kUpgrade linux-image-5.15.0-1029-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-56-generic-lpaeUpgrade linux-image-5.19.0-1012-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-1025-gcpUpgrade linux-image-5.15.0-1025-oracleUpgrade linux-image-5.15.0-56-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1021-intel-iotgUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-5.19.0-1013-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-5.19.0-1013-azureUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1023-gkeUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1115-awsUpgrade linux-image-5.15.0-1011-gkeopUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-202-genericUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.19.0-1012-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-ibmUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.15.0-1021-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1021-raspi | Dec 2, 2022 | Nov 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub