In the Linux kernel, the following vulnerability has been resolved:
nfs: handle failure of nfs_get_lock_context in unlock path
When memory is insufficient, the allocation of nfs_lock_context in nfs_get_lock_context() fails and returns -ENOMEM. If we mistakenly treat an nfs4_unlockdata structure (whose l_ctx member has been set to -ENOMEM) as valid and proceed to execute rpc_run_task(), this will trigger a NULL pointer dereference in nfs4_locku_prepare. For example:
BUG: kernel NULL pointer dereference, address: 000000000000000c PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 15 UID: 0 PID: 12 Comm: kworker/u64:0 Not tainted 6.15.0-rc2-dirty #60 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 Workqueue: rpciod rpc_async_schedule RIP: 0010:nfs4_locku_prepare+0x35/0xc2 Code: 89 f2 48 89 fd 48 c7 c7 68 69 ef b5 53 48 8b 8e 90 00 00 00 48 89 f3 RSP: 0018:ffffbbafc006bdb8 EFLAGS: 00010246 RAX: 000000000000004b RBX: ffff9b964fc1fa00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: fffffffffffffff4 RDI: ffff9ba53fddbf40 RBP: ffff9ba539934000 R08: 0000000000000000 R09: ffffbbafc006bc38 R10: ffffffffb6b689c8 R11: 0000000000000003 R12: ffff9ba539934030 R13: 0000000000000001 R14: 0000000004248060 R15: ffffffffb56d1c30 FS: 0000000000000000(0000) GS:ffff9ba5881f0000(0000) knlGS:00000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000000c CR3: 000000093f244000 CR4: 00000000000006f0 Call Trace: <TASK> __rpc_execute+0xbc/0x480 rpc_async_schedule+0x2f/0x40 process_one_work+0x232/0x5d0 worker_thread+0x1da/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0x10d/0x240 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 000000000000000c ---[ end trace 0000000000000000 ]---
Free the allocated nfs4_unlockdata when nfs_get_lock_context() fails and return NULL to terminate subsequent rpc_run_task, preventing NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-livepatch-4.14.355-280.679Upgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.184-125.189Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel6.12Upgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.30-34.92Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel6.12-debuginfoUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-devel | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-amdUpgrade dtb-freescaleUpgrade dtb-armUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade dtb-allwinner | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-xilinxUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-realtime-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-virtual-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-realtime-6.8.1 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub