In the Linux kernel, the following vulnerability has been resolved:
pNFS: Fix uninited ptr deref in block/scsi layout
The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers.
An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server.
During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of extents can be huge, and counting the number of written extents in ext_tree_encode_commit() does not help much. Since this number increases even more between unlocking and locking of ext_tree, the reallocated buffer may not be large enough again and again.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-livepatch-5.15.191-132.213Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel6.12-libbpfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-headersUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-livepatch-6.1.150-174.273Upgrade python3-perf6.12Upgrade kernel-libbpf-develUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernelUpgrade kernel-modules-extraUpgrade kernel6.12-modules-extra-common | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 4, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-amazon | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-virtualUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azureUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intelUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-xilinxUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-raspi-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-ibm-6.8 | Dec 5, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub