In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perf-debuginfo | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-headers | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade kernel-source-azure | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linuxUpgrade linux-oracleUpgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-aws-hweUpgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-aws-5.4 | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub