The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-docUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-tools | Jan 26, 2023 | Nov 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernelUpgrade bpftool-debuginfoUpgrade python-perf | Mar 22, 2023 | Nov 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | Oct 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kernelUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debugsource | Jan 24, 2023 | Nov 4, 2022 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Nov 4, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 25, 2023 | Oct 3, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 14, 2022 | Nov 4, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-debug-devel-matchedUpgrade bpftoolUpgrade kernel-rtUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade python3-perf | Apr 18, 2024 | Nov 4, 2022 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-preemptUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-preempt-optionalUpgrade kernel-kvmsmall-baseUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-preempt-extraUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade dtb-appleUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-alUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade dtb-amazonUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dlm-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade dtb-zteUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-vanilla-baseUpgrade kernel-syms-azureUpgrade kselftests-kmp-preemptUpgrade kernel-vanillaUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-source | Dec 19, 2022 | Nov 4, 2022 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1021-raspiUpgrade linux-image-5.15.0-1025-oracleUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1023-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1013-azureUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-56-generic-64kUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-1011-gkeopUpgrade linux-image-5.15.0-1021-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1012-lowlatency-64kUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1025-gcpUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-ibmUpgrade linux-image-5.19.0-1013-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1021-intel-iotgUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-5.15.0-56-genericUpgrade linux-image-5.19.0-1012-lowlatencyUpgrade linux-image-5.15.0-1029-azure-fdeUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.15.0-56-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1115-awsUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1159-azureUpgrade linux-image-gcpUpgrade linux-image-5.15.0-56-lowlatency-64kUpgrade linux-image-5.19.0-1013-kvmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-5.15.0-56-lowlatencyUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1013-gcpUpgrade linux-image-5.19.0-1013-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtualUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1024-kvmUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.17.0-1024-oemUpgrade linux-image-oem-osp1Upgrade linux-image-dell300xUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1026-awsUpgrade linux-image-5.15.0-1029-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-5.19.0-1009-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.19.0-26-generic-lpaeUpgrade linux-image-5.19.0-1009-raspi-nolpaeUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-5.15.0-1021-ibmUpgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-5.19.0-26-genericUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1014-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-genericUpgrade linux-image-5.19.0-26-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1143-gcp | Dec 2, 2022 | Nov 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub