In the Linux kernel, the following vulnerability has been resolved:
nfs: handle failure of nfs_get_lock_context in unlock path
When memory is insufficient, the allocation of nfs_lock_context in nfs_get_lock_context() fails and returns -ENOMEM. If we mistakenly treat an nfs4_unlockdata structure (whose l_ctx member has been set to -ENOMEM) as valid and proceed to execute rpc_run_task(), this will trigger a NULL pointer dereference in nfs4_locku_prepare. For example:
BUG: kernel NULL pointer dereference, address: 000000000000000c PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 15 UID: 0 PID: 12 Comm: kworker/u64:0 Not tainted 6.15.0-rc2-dirty #60 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 Workqueue: rpciod rpc_async_schedule RIP: 0010:nfs4_locku_prepare+0x35/0xc2 Code: 89 f2 48 89 fd 48 c7 c7 68 69 ef b5 53 48 8b 8e 90 00 00 00 48 89 f3 RSP: 0018:ffffbbafc006bdb8 EFLAGS: 00010246 RAX: 000000000000004b RBX: ffff9b964fc1fa00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: fffffffffffffff4 RDI: ffff9ba53fddbf40 RBP: ffff9ba539934000 R08: 0000000000000000 R09: ffffbbafc006bc38 R10: ffffffffb6b689c8 R11: 0000000000000003 R12: ffff9ba539934030 R13: 0000000000000001 R14: 0000000004248060 R15: ffffffffb56d1c30 FS: 0000000000000000(0000) GS:ffff9ba5881f0000(0000) knlGS:00000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000000c CR3: 000000093f244000 CR4: 00000000000006f0 Call Trace: <TASK> __rpc_execute+0xbc/0x480 rpc_async_schedule+0x2f/0x40 process_one_work+0x232/0x5d0 worker_thread+0x1da/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0x10d/0x240 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 000000000000000c ---[ end trace 0000000000000000 ]---
Free the allocated nfs4_unlockdata when nfs_get_lock_context() fails and return NULL to terminate subsequent rpc_run_task, preventing NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.184-125.189Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-livepatch-4.14.355-280.679Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernelUpgrade python3-perf6.12Upgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.12.30-34.92Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-tools-debuginfoUpgrade kernel6.12Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade perf-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdso | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-intelUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-realtime-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-5.15 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub