The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-docUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extra | Jan 26, 2023 | Nov 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headers | Mar 22, 2023 | Nov 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Oct 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfo | Jan 24, 2023 | Nov 4, 2022 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Nov 4, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 25, 2023 | Oct 3, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 14, 2022 | Nov 4, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade bpftoolUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade perfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-zfcpdump | Apr 18, 2024 | Nov 4, 2022 |
| Suse | — | Upgrade kernel-debug-develUpgrade cluster-md-kmp-preemptUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-baseUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade kernel-preempt-optionalUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade gfs2-kmp-preemptUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-vanilla-develUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-baseUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade dtb-alUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-preemptUpgrade kselftests-kmp-preemptUpgrade kernel-vanillaUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-debug-baseUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade dtb-zteUpgrade reiserfs-kmp-preemptUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-apm | Dec 19, 2022 | Nov 4, 2022 |
| Ubuntu | — | Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.19.0-1009-raspiUpgrade linux-image-5.19.0-26-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-5.19.0-1009-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.19.0-26-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1014-awsUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-5.15.0-56-lowlatency-64kUpgrade linux-image-5.19.0-1013-ibmUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-5.19.0-1013-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-5.15.0-56-lowlatencyUpgrade linux-image-5.15.0-1026-awsUpgrade linux-image-5.19.0-1013-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-5.15.0-1029-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1159-azureUpgrade linux-image-oem-20.04Upgrade linux-image-dell300xUpgrade linux-image-5.15.0-1021-ibmUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1024-kvmUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.14.0-1055-oemUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.17.0-1024-oemUpgrade linux-image-5.19.0-26-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1021-intel-iotgUpgrade linux-image-5.15.0-1025-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1021-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-5.19.0-1012-lowlatency-64kUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1021-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1011-gkeopUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-56-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-ibmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-snapdragonUpgrade linux-image-5.19.0-1013-azureUpgrade linux-image-oemUpgrade linux-image-5.19.0-1013-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1023-gkeUpgrade linux-image-5.19.0-1012-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.15.0-56-generic-lpaeUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-5.15.0-1025-oracleUpgrade linux-image-awsUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1029-azure-fdeUpgrade linux-image-5.15.0-56-genericUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1098-gcp | Dec 2, 2022 | Nov 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub