The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an NFSv4 mount request.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.28-17-serverUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-generic | Nov 8, 2024 | Oct 30, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub