In the Linux kernel, the following vulnerability has been resolved:
nfs: handle failure of nfs_get_lock_context in unlock path
When memory is insufficient, the allocation of nfs_lock_context in nfs_get_lock_context() fails and returns -ENOMEM. If we mistakenly treat an nfs4_unlockdata structure (whose l_ctx member has been set to -ENOMEM) as valid and proceed to execute rpc_run_task(), this will trigger a NULL pointer dereference in nfs4_locku_prepare. For example:
BUG: kernel NULL pointer dereference, address: 000000000000000c PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 15 UID: 0 PID: 12 Comm: kworker/u64:0 Not tainted 6.15.0-rc2-dirty #60 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 Workqueue: rpciod rpc_async_schedule RIP: 0010:nfs4_locku_prepare+0x35/0xc2 Code: 89 f2 48 89 fd 48 c7 c7 68 69 ef b5 53 48 8b 8e 90 00 00 00 48 89 f3 RSP: 0018:ffffbbafc006bdb8 EFLAGS: 00010246 RAX: 000000000000004b RBX: ffff9b964fc1fa00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: fffffffffffffff4 RDI: ffff9ba53fddbf40 RBP: ffff9ba539934000 R08: 0000000000000000 R09: ffffbbafc006bc38 R10: ffffffffb6b689c8 R11: 0000000000000003 R12: ffff9ba539934030 R13: 0000000000000001 R14: 0000000004248060 R15: ffffffffb56d1c30 FS: 0000000000000000(0000) GS:ffff9ba5881f0000(0000) knlGS:00000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000000c CR3: 000000093f244000 CR4: 00000000000006f0 Call Trace: <TASK> __rpc_execute+0xbc/0x480 rpc_async_schedule+0x2f/0x40 process_one_work+0x232/0x5d0 worker_thread+0x1da/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0x10d/0x240 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 000000000000000c ---[ end trace 0000000000000000 ]---
Free the allocated nfs4_unlockdata when nfs_get_lock_context() fails and return NULL to terminate subsequent rpc_run_task, preventing NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.15.184-125.189Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-livepatch-4.14.355-280.679Upgrade perfUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-livepatch-6.12.30-34.92Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade perf-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade dtb-apmUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade dtb-appleUpgrade kernel-debugUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-realtimeUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-genericUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-gcpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-virtualUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-realtime-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-intelUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-virtual-6.8 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub