In the Linux kernel, the following vulnerability has been resolved:
NFSD: fix race between nfsd registration and exports_proc
As of now nfsd calls create_proc_exports_entry() at start of init_nfsd and cleanup by remove_proc_entry() at last of exit_nfsd.
Which causes kernel OOPs if there is race between below 2 operations: (i) exportfs -r (ii) mount -t nfsd none /proc/fs/nfsd
for 5.4 kernel ARM64:
CPU 1: el1_irq+0xbc/0x180 arch_counter_get_cntvct+0x14/0x18 running_clock+0xc/0x18 preempt_count_add+0x88/0x110 prep_new_page+0xb0/0x220 get_page_from_freelist+0x2d8/0x1778 __alloc_pages_nodemask+0x15c/0xef0 __vmalloc_node_range+0x28c/0x478 __vmalloc_node_flags_caller+0x8c/0xb0 kvmalloc_node+0x88/0xe0 nfsd_init_net+0x6c/0x108 [nfsd] ops_init+0x44/0x170 register_pernet_operations+0x114/0x270 register_pernet_subsys+0x34/0x50 init_nfsd+0xa8/0x718 [nfsd] do_one_initcall+0x54/0x2e0
CPU 2 : Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010
PC is at : exports_net_open+0x50/0x68 [nfsd]
Call trace: exports_net_open+0x50/0x68 [nfsd] exports_proc_open+0x2c/0x38 [nfsd] proc_reg_open+0xb8/0x198 do_dentry_open+0x1c4/0x418 vfs_open+0x38/0x48 path_openat+0x28c/0xf18 do_filp_open+0x70/0xe8 do_sys_open+0x154/0x248
Sometimes it crashes at exports_net_open() and sometimes cache_seq_next_rcu().
and same is happening on latest 6.14 kernel as well:
[ 0.000000] Linux version 6.14.0-rc5-next-20250304-dirty ... [ 285.455918] Unable to handle kernel paging request at virtual address 00001f4800001f48 ... [ 285.464902] pc : cache_seq_next_rcu+0x78/0xa4 ... [ 285.469695] Call trace: [ 285.470083] cache_seq_next_rcu+0x78/0xa4 (P) [ 285.470488] seq_read+0xe0/0x11c [ 285.470675] proc_reg_read+0x9c/0xf0 [ 285.470874] vfs_read+0xc4/0x2fc [ 285.471057] ksys_read+0x6c/0xf4 [ 285.471231] __arm64_sys_read+0x1c/0x28 [ 285.471428] invoke_syscall+0x44/0x100 [ 285.471633] el0_svc_common.constprop.0+0x40/0xe0 [ 285.471870] do_el0_svc_compat+0x1c/0x34 [ 285.472073] el0_svc_compat+0x2c/0x80 [ 285.472265] el0t_32_sync_handler+0x90/0x140 [ 285.472473] el0t_32_sync+0x19c/0x1a0 [ 285.472887] Code: f9400885 93407c23 937d7c27 11000421 (f86378a3) [ 285.473422] ---[ end trace 0000000000000000 ]---
It reproduced simply with below script: while [ 1 ] do /exportfs -r done &
while [ 1 ] do insmod /nfsd.ko mount -t nfsd none /proc/fs/nfsd umount /proc/fs/nfsd rmmod nfsd done &
So exporting interfaces to user space shall be done at last and cleanup at first place.
With change there is no Kernel OOPs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel6.12Upgrade perf6.12Upgrade kernel-headersUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernel6.12-modules-extra | Sep 9, 2025 | Jul 4, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 7, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 12, 2026 | Jul 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-default-optionalUpgrade dtb-appleUpgrade kernel-rt-develUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-vdso | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-176-genericUpgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-6.14Upgrade linux-image-intelUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-gke-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1105-awsUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gkeopUpgrade linux-image-fips-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-5.15.0-176-fipsUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-lts-24.04 | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub