UBUNTU-CVE-2025-21908

In the Linux kernel, the following vulnerability has been resolved: NFS: fix nfsreleasefolio to not deadlock via kcompactd writeback Add PFKCOMPACTD flag and currentiskcompactd helper to check for it so nfsreleasefolio can skip calling nfswbfolio from kcompactd. Otherwise NFS can deadlock waiting...

CVE-2025-21908

CVE-2025-21908 concerns the Linux kernel NFS subsystem. The issue arises when nfs_release_folio() can deadlock during writeback initiated by kcompactd, triggering a recursive path through NFS and the NFSD loopback on the same host. The patch adds PF_KCOMPACTD and a current_is_kcompactd() helper t...

CVE-2025-21908

In the Linux kernel, the following vulnerability has been resolved: NFS: fix nfsreleasefolio to not deadlock via kcompactd writeback Add PFKCOMPACTD flag and currentiskcompactd helper to check for it so nfsreleasefolio can skip calling nfswbfolio from kcompactd. Otherwise NFS can deadlock waiting...

CVE-2025-21908 NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback

In the Linux kernel, the following vulnerability has been resolved: NFS: fix nfsreleasefolio to not deadlock via kcompactd writeback Add PFKCOMPACTD flag and currentiskcompactd helper to check for it so nfsreleasefolio can skip calling nfswbfolio from kcompactd. Otherwise NFS can deadlock waiting...

CVE-2025-21908 NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback

In the Linux kernel, the following vulnerability has been resolved: NFS: fix nfsreleasefolio to not deadlock via kcompactd writeback Add PFKCOMPACTD flag and currentiskcompactd helper to check for it so nfsreleasefolio can skip calling nfswbfolio from kcompactd. Otherwise NFS can deadlock waiting...

CVE-2025-21900 NFSv4: Fix a deadlock when recovering state on a sillyrenamed file

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a deadlock when recovering state on a sillyrenamed file If the file is sillyrenamed, and slated for delete on close, it is possible for a server reboot to triggeer an open reclaim, with can again race with the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a possible deadlock of nfsreleasefolio in the context of kcompactd...

USN-7383-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Ublk userspace block driver; -...

USN-7380-1 linux-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

CVE-2023-53025

Removed by vendor...

The vulnerability of the nfs4_set_security_label() function in the fs/nfs/nfs4proc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfs4setsecuritylabel function in the fs/nfs/nfs4proc.c module of the Linux kernel is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

nfs-utils bug fix and enhancement update

An update is available for nfs-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....

The vulnerability of the nfs_local_read_done() function in the fs/nfs/localio.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfslocalreaddone function in the fs/nfs/localio.c module of the Linux kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53217)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53217 advisory. - In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56779)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56779 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56779)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56779 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when...

Linux Distros Unpatched Vulnerability : CVE-2024-53167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfs/blocklayout: Don't attempt unregister for invalid block device Since commit d869da91cccb...

Linux Distros Unpatched Vulnerability : CVE-2024-49875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: map the EBADMSG to nfserrio to avoid warning Ext4 will throw -EBADMSG through ext4readdir when a checksum error occurs, resulting in the following WARNING...

Linux Distros Unpatched Vulnerability : CVE-2024-50046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFSv4: Prevent NULL-pointer dereference in nfs42completecopies On the node of an NFS client,...

Linux Distros Unpatched Vulnerability : CVE-2024-54456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflowin nfssysfslinkrpcclient name is char64 where the size of...