In the Linux kernel, the following vulnerability has been resolved:
nfsd: return -EINVAL when namelen is 0
When we have a corrupted main.sqlite in /var/lib/nfs/nfsdcld/, it may result in namelen being 0, which will cause memdup_user() to return ZERO_SIZE_PTR. When we access the name.data that has been assigned the value of ZERO_SIZE_PTR in nfs4_client_to_reclaim(), null pointer dereference is triggered.
[ T1205] ================================================================== [ T1205] BUG: KASAN: null-ptr-deref in nfs4_client_to_reclaim+0xe9/0x260 [ T1205] Read of size 1 at addr 0000000000000010 by task nfsdcld/1205 [ T1205] [ T1205] CPU: 11 PID: 1205 Comm: nfsdcld Not tainted 5.10.0-00003-g2c1423731b8d #406 [ T1205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ?-20190727_073836-buildvm-ppc64le-16.ppc.fedoraproject.org-3.fc31 04/01/2014 [ T1205] Call Trace: [ T1205] dump_stack+0x9a/0xd0 [ T1205] ? nfs4_client_to_reclaim+0xe9/0x260 [ T1205] __kasan_report.cold+0x34/0x84 [ T1205] ? nfs4_client_to_reclaim+0xe9/0x260 [ T1205] kasan_report+0x3a/0x50 [ T1205] nfs4_client_to_reclaim+0xe9/0x260 [ T1205] ? nfsd4_release_lockowner+0x410/0x410 [ T1205] cld_pipe_downcall+0x5ca/0x760 [ T1205] ? nfsd4_cld_tracking_exit+0x1d0/0x1d0 [ T1205] ? down_write_killable_nested+0x170/0x170 [ T1205] ? avc_policy_seqno+0x28/0x40 [ T1205] ? selinux_file_permission+0x1b4/0x1e0 [ T1205] rpc_pipe_write+0x84/0xb0 [ T1205] vfs_write+0x143/0x520 [ T1205] ksys_write+0xc9/0x170 [ T1205] ? __ia32_sys_read+0x50/0x50 [ T1205] ? ktime_get_coarse_real_ts64+0xfe/0x110 [ T1205] ? ktime_get_coarse_real_ts64+0xa2/0x110 [ T1205] do_syscall_64+0x33/0x40 [ T1205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ T1205] RIP: 0033:0x7fdbdb761bc7 [ T1205] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 514 [ T1205] RSP: 002b:00007fff8c4b7248 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ T1205] RAX: ffffffffffffffda RBX: 000000000000042b RCX: 00007fdbdb761bc7 [ T1205] RDX: 000000000000042b RSI: 00007fff8c4b75f0 RDI: 0000000000000008 [ T1205] RBP: 00007fdbdb761bb0 R08: 0000000000000000 R09: 0000000000000001 [ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000042b [ T1205] R13: 0000000000000008 R14: 00007fff8c4b75f0 R15: 0000000000000000 [ T1205] ==================================================================
Fix it by checking namelen.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-devel | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade perfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.115-126.197Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-oemUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-gkeop-6.8 | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub