In the Linux kernel, the following vulnerability has been resolved:
nfsd: make sure exp active before svc_export_show
The function `e_show` was called with protection from RCU. This only ensures that `exp` will not be freed. Therefore, the reference count for `exp` can drop to zero, which will trigger a refcount use-after-free warning when `exp_get` is called. To resolve this issue, use `cache_get_rcu` to ensure that `exp` remains active.
------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 3 PID: 819 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120 ... Call Trace: <TASK> e_show+0x20b/0x230 [nfsd] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.233-223.887Upgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfo | Mar 14, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfo | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Jun 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jul 1, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azureUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-fipsUpgrade linux-image-nvidia-hwe-22.04 | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub