An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-source-azure | Oct 26, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-1012-awsUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-5.14.0-1018-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic | Jan 11, 2022 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 29, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub