In the Linux kernel, the following vulnerability has been resolved:
nfsd: ensure that nfsd4_fattr_args.context is zeroed out
If nfsd4_encode_fattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'll then try to free. Initialize it early.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade rvUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virtUpgrade kernel-debug-modules-coreUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-modulesUpgrade kernel-64kUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-coreUpgrade kernel-64k-modulesUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libs | Jan 14, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Jan 7, 2025 | Sep 13, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 10, 2025 | Sep 13, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-virtualUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gcp | Dec 13, 2024 | Sep 13, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub