An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-devel-azure | Oct 26, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1028-azureUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-5.14.0-1018-oemUpgrade linux-image-azureUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-oracleUpgrade linux-image-generic-lpae | Jan 11, 2022 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 29, 2025 | Feb 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub