The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-docUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-core | Jan 26, 2023 | Nov 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.75-48.135Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headers | Mar 22, 2023 | Nov 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade bpftool | Feb 17, 2025 | Oct 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 4, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-4_18_0-425_10_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1Upgrade kpatch-patch-4_18_0-425_3_1-debugsourceUpgrade kpatch-patch-4_18_0-425_10_1-debugsourceUpgrade kpatch-patch-4_18_0-425_3_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-4_18_0-425_3_1 | Jan 24, 2023 | Nov 4, 2022 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Nov 4, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 25, 2023 | Oct 3, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 14, 2022 | Nov 4, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-debuginfoUpgrade perfUpgrade kernel-rt-devel | Apr 18, 2024 | Nov 4, 2022 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-rtUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-vanillaUpgrade kselftests-kmp-preemptUpgrade dtb-zteUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade dtb-alUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade kernel-vanilla-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-debug-baseUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-preempt-optionalUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade dtb-sprdUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-docsUpgrade dtb-caviumUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-preempt-livepatch-develUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade dtb-amdUpgrade kernel-preempt-extraUpgrade cluster-md-kmp-preemptUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kb | Dec 19, 2022 | Nov 4, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1159-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.17.0-1024-oemUpgrade linux-image-5.15.0-1024-kvmUpgrade linux-image-5.15.0-1021-ibmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-dell300xUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.0.0-1012-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-1014-awsUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-236-genericUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.19.0-26-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.19.0-1009-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1029-azureUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-1013-gcpUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-5.19.0-1009-raspi-nolpaeUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1026-awsUpgrade linux-image-5.19.0-26-genericUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-56-lowlatency-64kUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-56-lowlatencyUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-5.19.0-1013-ibmUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1148-awsUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-5.19.0-26-generic-64kUpgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1013-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1011-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-56-genericUpgrade linux-image-5.15.0-1021-intel-iotgUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1115-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1025-oracleUpgrade linux-image-5.19.0-1013-azureUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.19.0-1012-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-56-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1021-raspi-nolpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.19.0-1013-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1029-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-56-generic-lpaeUpgrade linux-image-5.15.0-1025-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1023-gkeUpgrade linux-image-5.19.0-1012-lowlatencyUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1021-raspiUpgrade linux-image-gke-5.15 | Dec 2, 2022 | Nov 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub