An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system integrity and confidentiality threat.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall | Oct 26, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-5.14.0-1018-oemUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-genericUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-1012-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1028-azureUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-virtualUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-oem-20.04d | Jan 11, 2022 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 29, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub