fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) via crafted network traffic.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 2, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-devel | Nov 30, 2017 | May 2, 2016 |
| Oracle_linux | — | Upgrade kernel | Nov 9, 2016 | May 2, 2016 |
| Redhat_linux | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-bootwrapperUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-kdump-develUpgrade kernel-kdump-debuginfoUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-rt-trace-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-trace-develUpgrade kernel-rtUpgrade kernel-debuginfoUpgrade kernel-kdumpUpgrade kernel-rt-traceUpgrade kernel-rt-debug-develUpgrade kernel-rt-docUpgrade kernel-abi-whitelistsUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-docUpgrade kernel-tools | Nov 4, 2016 | May 2, 2016 |
| Ubuntu | — | Upgrade linux-raspi2Upgrade linux-lts-vividUpgrade linux-lts-trustyUpgrade linuxUpgrade linux-lts-utopic | Nov 19, 2024 | May 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub