In the Linux kernel, the following vulnerability has been resolved:
nfsd: ensure that nfsd4_fattr_args.context is zeroed out
If nfsd4_encode_fattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'll then try to free. Initialize it early.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade perfUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-64k-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-64kUpgrade kernel-rt-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-debug | Jan 14, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Jan 7, 2025 | Sep 13, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Feb 10, 2025 | Sep 13, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oracle | Dec 13, 2024 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub