In the Linux kernel, the following vulnerability has been resolved:
nfsd: return -EINVAL when namelen is 0
When we have a corrupted main.sqlite in /var/lib/nfs/nfsdcld/, it may result in namelen being 0, which will cause memdup_user() to return ZERO_SIZE_PTR. When we access the name.data that has been assigned the value of ZERO_SIZE_PTR in nfs4_client_to_reclaim(), null pointer dereference is triggered.
[ T1205] ================================================================== [ T1205] BUG: KASAN: null-ptr-deref in nfs4_client_to_reclaim+0xe9/0x260 [ T1205] Read of size 1 at addr 0000000000000010 by task nfsdcld/1205 [ T1205] [ T1205] CPU: 11 PID: 1205 Comm: nfsdcld Not tainted 5.10.0-00003-g2c1423731b8d #406 [ T1205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ?-20190727_073836-buildvm-ppc64le-16.ppc.fedoraproject.org-3.fc31 04/01/2014 [ T1205] Call Trace: [ T1205] dump_stack+0x9a/0xd0 [ T1205] ? nfs4_client_to_reclaim+0xe9/0x260 [ T1205] __kasan_report.cold+0x34/0x84 [ T1205] ? nfs4_client_to_reclaim+0xe9/0x260 [ T1205] kasan_report+0x3a/0x50 [ T1205] nfs4_client_to_reclaim+0xe9/0x260 [ T1205] ? nfsd4_release_lockowner+0x410/0x410 [ T1205] cld_pipe_downcall+0x5ca/0x760 [ T1205] ? nfsd4_cld_tracking_exit+0x1d0/0x1d0 [ T1205] ? down_write_killable_nested+0x170/0x170 [ T1205] ? avc_policy_seqno+0x28/0x40 [ T1205] ? selinux_file_permission+0x1b4/0x1e0 [ T1205] rpc_pipe_write+0x84/0xb0 [ T1205] vfs_write+0x143/0x520 [ T1205] ksys_write+0xc9/0x170 [ T1205] ? __ia32_sys_read+0x50/0x50 [ T1205] ? ktime_get_coarse_real_ts64+0xfe/0x110 [ T1205] ? ktime_get_coarse_real_ts64+0xa2/0x110 [ T1205] do_syscall_64+0x33/0x40 [ T1205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ T1205] RIP: 0033:0x7fdbdb761bc7 [ T1205] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 514 [ T1205] RSP: 002b:00007fff8c4b7248 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ T1205] RAX: ffffffffffffffda RBX: 000000000000042b RCX: 00007fdbdb761bc7 [ T1205] RDX: 000000000000042b RSI: 00007fff8c4b75f0 RDI: 0000000000000008 [ T1205] RBP: 00007fdbdb761bb0 R08: 0000000000000000 R09: 0000000000000001 [ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000042b [ T1205] R13: 0000000000000008 R14: 00007fff8c4b75f0 R15: 0000000000000000 [ T1205] ==================================================================
Fix it by checking namelen.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.168-114.166Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-devel | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.115-126.197 | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-kvmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-oemUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1070-gke | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub