In the Linux kernel, the following vulnerability has been resolved:
NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
OPDESC() simply indexes into nfsd4_ops[] by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds opnum value.
nfsd4_decode_compound() is not so careful, and can invoke OPDESC() with opnum set to OP_ILLEGAL, which is 10044 -- well beyond the end of nfsd4_ops[].
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.15.108-65.141Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.355-280.710Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.220-209.867Upgrade python-perfUpgrade perfUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade python3-perf | Oct 24, 2025 | Oct 7, 2025 |
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 17, 2026 | Oct 7, 2025 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-awsUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeopUpgrade linux-bluefieldUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-nvidia-tegraUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linux-lowlatencyUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iotg | Oct 10, 2025 | Oct 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub