In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade perf | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-preempt-devel | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-awsUpgrade linuxUpgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4 | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub