In the Linux kernel, the following vulnerability has been resolved:
nfsd: make sure exp active before svc_export_show
The function `e_show` was called with protection from RCU. This only ensures that `exp` will not be freed. Therefore, the reference count for `exp` can drop to zero, which will trigger a refcount use-after-free warning when `exp_get` is called. To resolve this issue, use `cache_get_rcu` to ensure that `exp` remains active.
------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 3 PID: 819 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120 ... Call Trace: <TASK> e_show+0x20b/0x230 [nfsd] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-livepatch-5.10.233-223.887Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Mar 14, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Jul 1, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1014-azure-nvidia | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub