In the Linux kernel, the following vulnerability has been resolved:
nfsd: make sure exp active before svc_export_show
The function `e_show` was called with protection from RCU. This only ensures that `exp` will not be freed. Therefore, the reference count for `exp` can drop to zero, which will trigger a refcount use-after-free warning when `exp_get` is called. To resolve this issue, use `cache_get_rcu` to ensure that `exp` remains active.
------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 3 PID: 819 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120 ... Call Trace: <TASK> e_show+0x20b/0x230 [nfsd] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.233-223.887 | Mar 14, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.124-134.200Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perfUpgrade python3-perf-debuginfo | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Jun 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Jul 1, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-azure-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-211-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-genericUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-bluefieldUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-gcp-lts-24.04 | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub