An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-zfcpdump | Oct 26, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade linux-image-5.14.0-1018-oemUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-genericUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-raspiUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-awsUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-1012-awsUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1029-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04 | Jan 11, 2022 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 29, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub