In the Linux kernel, the following vulnerability has been resolved:
NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
Commit de144ff4234f changes _pnfs_return_layout() to call pnfs_mark_matching_lsegs_return() passing NULL as the struct pnfs_layout_range argument. Unfortunately, pnfs_mark_matching_lsegs_return() doesn't check if we have a value here before dereferencing it, causing an oops.
I'm able to hit this crash consistently when running connectathon basic tests on NFS v4.1/v4.2 against Ontap.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-preempt-devel | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-hwe-5.4Upgrade linux-awsUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linuxUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-aws-5.4Upgrade linux-oracle | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub