In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-devel | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade perf | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-zfcpdump | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-aws-hweUpgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-awsUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-hweUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-gcp | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub