In the Linux kernel, the following vulnerability has been resolved:
NFS: fix an incorrect limit in filelayout_decode_layout()
The "sizeof(struct nfs_fh)" is two bytes too large and could lead to memory corruption. It should be NFS_MAXFHSIZE because that's the size of the ->data[] buffer.
I reversed the size of the arguments to put the variable on the left.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade python-perfUpgrade python-perf-debuginfo | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernel-headers | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-64kb | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-raspiUpgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-fipsUpgrade linux-azure-4.15Upgrade linuxUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4 | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub