In the Linux kernel, the following vulnerability has been resolved:
nfs: handle failure of nfs_get_lock_context in unlock path
When memory is insufficient, the allocation of nfs_lock_context in nfs_get_lock_context() fails and returns -ENOMEM. If we mistakenly treat an nfs4_unlockdata structure (whose l_ctx member has been set to -ENOMEM) as valid and proceed to execute rpc_run_task(), this will trigger a NULL pointer dereference in nfs4_locku_prepare. For example:
BUG: kernel NULL pointer dereference, address: 000000000000000c PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 15 UID: 0 PID: 12 Comm: kworker/u64:0 Not tainted 6.15.0-rc2-dirty #60 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 Workqueue: rpciod rpc_async_schedule RIP: 0010:nfs4_locku_prepare+0x35/0xc2 Code: 89 f2 48 89 fd 48 c7 c7 68 69 ef b5 53 48 8b 8e 90 00 00 00 48 89 f3 RSP: 0018:ffffbbafc006bdb8 EFLAGS: 00010246 RAX: 000000000000004b RBX: ffff9b964fc1fa00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: fffffffffffffff4 RDI: ffff9ba53fddbf40 RBP: ffff9ba539934000 R08: 0000000000000000 R09: ffffbbafc006bc38 R10: ffffffffb6b689c8 R11: 0000000000000003 R12: ffff9ba539934030 R13: 0000000000000001 R14: 0000000004248060 R15: ffffffffb56d1c30 FS: 0000000000000000(0000) GS:ffff9ba5881f0000(0000) knlGS:00000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000000c CR3: 000000093f244000 CR4: 00000000000006f0 Call Trace: <TASK> __rpc_execute+0xbc/0x480 rpc_async_schedule+0x2f/0x40 process_one_work+0x232/0x5d0 worker_thread+0x1da/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0x10d/0x240 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 000000000000000c ---[ end trace 0000000000000000 ]---
Free the allocated nfs4_unlockdata when nfs_get_lock_context() fails and return NULL to terminate subsequent rpc_run_task, preventing NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-4.14.355-280.679Upgrade perfUpgrade kernel-livepatch-5.15.184-125.190Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.184-125.189Upgrade kernel-tools-develUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade perfUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel6.12Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.30-34.92 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dtb-amd | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intelUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-gcp-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-5.15Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-gke-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-aws | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub