In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.238-182.421 | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade perf | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade kernel-macros | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-awsUpgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-hweUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linuxUpgrade linux-gcp-5.4 | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub