The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade perfUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-tools-libs-devel | Jan 26, 2023 | Nov 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Mar 22, 2023 | Nov 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42 | Feb 17, 2025 | Oct 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-425_3_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-4_18_0-425_10_1-debuginfo | Jan 24, 2023 | Nov 4, 2022 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Nov 4, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 25, 2023 | Oct 3, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Dec 14, 2022 | Nov 4, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-debug-debuginfo | Apr 18, 2024 | Nov 4, 2022 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-extraUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade dtb-caviumUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-preemptUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kselftests-kmp-preemptUpgrade kernel-vanillaUpgrade gfs2-kmp-64kbUpgrade dtb-zteUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dlm-kmp-preemptUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade dtb-alUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-debug-baseUpgrade dtb-alteraUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade reiserfs-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-devel | Dec 19, 2022 | Nov 4, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-5.19.0-26-genericUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.19.0-1013-ibmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.19.0-1009-raspi-nolpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.0.0-1012-oemUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-5.19.0-26-generic-lpaeUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1013-kvmUpgrade linux-image-5.19.0-1009-raspiUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-4.15.0-1148-awsUpgrade linux-image-gkeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-26-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-56-lowlatency-64kUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1024-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-dell300xUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-oem-20.04bUpgrade linux-image-5.17.0-1024-oemUpgrade linux-image-5.15.0-1021-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-56-lowlatencyUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1014-awsUpgrade linux-image-5.19.0-1013-gcpUpgrade linux-image-5.15.0-1026-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1029-azureUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1025-gcpUpgrade linux-image-5.15.0-1021-intel-iotgUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-5.15.0-56-generic-lpaeUpgrade linux-image-5.15.0-1029-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.19.0-1013-azureUpgrade linux-image-ibmUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-5.15.0-1023-gkeUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1021-raspi-nolpaeUpgrade linux-image-5.15.0-1021-raspiUpgrade linux-image-5.15.0-1011-gkeopUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1025-oracleUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-azureUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1013-oracleUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1153-awsUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1012-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-1012-lowlatencyUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-56-generic-64kUpgrade linux-image-5.15.0-56-generic | Dec 2, 2022 | Nov 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
