In the Linux kernel, the following vulnerability has been resolved:
nfs: handle failure of nfs_get_lock_context in unlock path
When memory is insufficient, the allocation of nfs_lock_context in nfs_get_lock_context() fails and returns -ENOMEM. If we mistakenly treat an nfs4_unlockdata structure (whose l_ctx member has been set to -ENOMEM) as valid and proceed to execute rpc_run_task(), this will trigger a NULL pointer dereference in nfs4_locku_prepare. For example:
BUG: kernel NULL pointer dereference, address: 000000000000000c PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 15 UID: 0 PID: 12 Comm: kworker/u64:0 Not tainted 6.15.0-rc2-dirty #60 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 Workqueue: rpciod rpc_async_schedule RIP: 0010:nfs4_locku_prepare+0x35/0xc2 Code: 89 f2 48 89 fd 48 c7 c7 68 69 ef b5 53 48 8b 8e 90 00 00 00 48 89 f3 RSP: 0018:ffffbbafc006bdb8 EFLAGS: 00010246 RAX: 000000000000004b RBX: ffff9b964fc1fa00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: fffffffffffffff4 RDI: ffff9ba53fddbf40 RBP: ffff9ba539934000 R08: 0000000000000000 R09: ffffbbafc006bc38 R10: ffffffffb6b689c8 R11: 0000000000000003 R12: ffff9ba539934030 R13: 0000000000000001 R14: 0000000004248060 R15: ffffffffb56d1c30 FS: 0000000000000000(0000) GS:ffff9ba5881f0000(0000) knlGS:00000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000000c CR3: 000000093f244000 CR4: 00000000000006f0 Call Trace: <TASK> __rpc_execute+0xbc/0x480 rpc_async_schedule+0x2f/0x40 process_one_work+0x232/0x5d0 worker_thread+0x1da/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0x10d/0x240 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 000000000000000c ---[ end trace 0000000000000000 ]---
Free the allocated nfs4_unlockdata when nfs_get_lock_context() fails and return NULL to terminate subsequent rpc_run_task, preventing NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-4.14.355-280.679Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.184-125.189Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade python3-perfUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.30-34.92Upgrade kernel-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade dtb-freescaleUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optional | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-6.14Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-aws-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub