nfs: Fix KMSAN warning in decode_getfattr_attrs()

...

kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook

A flaw was found in the Linux kernel. A highly privileged user on a Network File System NFS client can bypass intended security restrictions and modify security labels on files located on an NFS filesystem. This issue occurs even when root squashing, a security feature designed to limit root user...

kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook

A flaw was found in the Linux kernel. A highly privileged user on a Network File System NFS client can bypass intended security restrictions and modify security labels on files located on an NFS filesystem. This issue occurs even when root squashing, a security feature designed to limit root user...

Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024128 fixes several issues. The following security issue was fixed: CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. Fix intermittent nfs mount failures, may be due to SUNRPC over UDP. bsc1231353 Patch Instructions: To install this SUSE...

SUSE CVE-2024-53136

In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmemgetattr" Revert d949d1d14fa2 "mm: shmem: fix data-race in shmemgetattr" as suggested by Chuck 1. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just t...

AZL-54185 CVE-2024-53136 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmemgetattr" Revert d949d1d14fa2 "mm: shmem: fix data-race in shmemgetattr" as suggested by Chuck 1. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just t...

DEBIAN-CVE-2024-53138

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of getpage and pagerefinc APIs to increment the page reference. But on the release path mlx5ektlstxhandleresyncdumpcomp, only putpage is use...

DEBIAN-CVE-2024-53136

In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmemgetattr" Revert d949d1d14fa2 "mm: shmem: fix data-race in shmemgetattr" as suggested by Chuck 1. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just t...

Linux kernel NFS DoS

The vulnerability of the Linux operating system’s kernel NFS component is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

nfsd DoS

The vulnerability of the nfsd component in Linux operating systems is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux nfsd Privilege Escalation

The vulnerability of the nfsd component in Linux operating systems is related to memory management errors after freeing memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

SUSE CVE-2024-53073

In the Linux kernel, the following vulnerability has been resolved: NFSD: Never decrement pendingasynccopies on error The error flow in nfsd4copy calls cleanupasynccopy, which already decrements nn-pendingasynccopies...

NETGEAR usb_device.cgi DoS

The vulnerability in the usbdevice.cgi script of NETGEAR’s R8500 and R7000P router microprogramming systems lies in a buffer overflow that occurs during the processing of the cifsuser, readaccess, and writeaccess parameters. Exploiting this vulnerability allows an attacker to trigger a...

UBUNTU-CVE-2024-53073

In the Linux kernel, the following vulnerability has been resolved: NFSD: Never decrement pendingasynccopies on error The error flow in nfsd4copy calls cleanupasynccopy, which already decrements nn-pendingasynccopies...

UBUNTU-CVE-2024-50272

In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemapread If the caller supplies an iocb-kipos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemapread enters an...

OpenBSD NFS Data Compromise

The vulnerability in the client and server implementations of the network file system NFS in the OpenBSD operating system is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of systems...

CVE-2024-10934

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server...

NFS Kernel Component DoS

The vulnerability of the NFS kernel component in Linux operating systems is related to incorrect blocking in the nfsnetfsissueread function. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: nfs: Handle error of rpc_proc_register() in nfs_net_init().

In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpcprocregister in nfsnetinit. syzkaller reported a warning 0 triggered while destroying immature netns. rpcprocregister was called in initnfsfs, but its error has been ignored since at least the initial comm...

kernel: nfs: pass explicit offset/count to trace events

nfs in linux kernel permits using nfsfoliolength without locking the folio and without checking for null mapping. This can permit truncation and lead to kernel crash...