The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade perf | Jan 26, 2023 | Nov 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernel | Mar 22, 2023 | Nov 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | Oct 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1 | Jan 24, 2023 | Nov 4, 2022 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Nov 4, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 25, 2023 | Oct 3, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 14, 2022 | Nov 4, 2022 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel | Apr 18, 2024 | Nov 4, 2022 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade dtb-alUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-vanilla-baseUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-debug-baseUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade kernel-vanilla-develUpgrade dlm-kmp-preemptUpgrade kernel-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kselftests-kmp-preemptUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade dtb-zteUpgrade kernel-vanilla-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debug-livepatch-develUpgrade dtb-caviumUpgrade kernel-preempt-extraUpgrade dtb-renesasUpgrade kernel-preempt-develUpgrade kernel-default-manUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade gfs2-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-develUpgrade dtb-armUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-preempt-optionalUpgrade kernel-preempt-livepatch-develUpgrade kernel-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-baseUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-devel | Dec 19, 2022 | Nov 4, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1025-gcpUpgrade linux-image-5.19.0-1013-oracleUpgrade linux-image-5.19.0-1012-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1025-oracleUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1011-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1013-azureUpgrade linux-image-oemUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1023-gkeUpgrade linux-image-ibmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.15.0-1029-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-56-generic-lpaeUpgrade linux-image-5.15.0-1021-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.15.0-1021-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-56-generic-64kUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-56-genericUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1021-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1012-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-5.15.0-56-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-1013-ibmUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.19.0-26-genericUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-5.4.0-1101-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-56-lowlatencyUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-5.15.0-1029-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-1013-gcpUpgrade linux-image-5.15.0-1026-awsUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-oracleUpgrade linux-image-5.17.0-1024-oemUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-5.19.0-26-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.19.0-1014-awsUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.19.0-26-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.19.0-1009-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.19.0-1009-raspiUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-genericUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1021-ibmUpgrade linux-image-5.15.0-1024-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-dell300xUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1013-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-236-lowlatency | Dec 2, 2022 | Nov 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub