59 matches found
PT-2024-36997
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the sunrpc module, where the XPRT SOCK UPD TIMEOUT flag is not cleared when the transport is reset. This ca...
UBUNTU-CVE-2021-47624
In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix reference count leaks in rpcsysfsxprtstatechange The refcount leak issues take place in an error handling path. When the 3rd argument buf doesn't match with "offline", "online" or "remove", the function simply...
PT-2024-7948
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0 Description The vulnerability is related to a suspicious RCU usage warning in the Linux kernel. It was discovered while running cthon against an ontap server running pNFS. The warning indicates that an...
SUSE CVE-2021-47001
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix cwnd update ordering After a reconnect, the reply handler is opening the cwnd and thus enabling more RPC Calls to be sent /before/ rpcrdmapostrecvs can post enough Receive WRs to receive their replies. This causes a...
CVE-2021-46952
In the Linux kernel, the following vulnerability has been resolved: NFS: fscontext: validate UDP retrans to prevent shift out-of-bounds Fix shift out-of-bounds in xprtcalcmajortimeo. This is caused by a garbage timeout retrans mount option being passed to nfs mount, in this case from syzkaller. I...
PT-2023-33703
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v6.0.15 Description The issue is related to a double svc xprt put under NFSv4.1 in the event of an rpc create failure. The actual impact and potential for attack have not been proven yet. Recommendations For...
PT-2023-34655
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9.229 through 4.9.336 Description The issue is related to a double svc xprt put on rpc create failure under NFSv4.1. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2023-34443
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a problem in the nfsd under NFSv4.1, where a double svc xprt put occurs on rpc create failure. The actual impact and attack plausibility have not yet been proven...
PT-2023-34122
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.85 Description The issue is related to a problem in the nfsd under NFSv4.1, where a double svc xprt put occurs on rpc create failure. The actual impact and attack plausibility have not yet been proven...
kernel: use after free in SUNRPC subsystem
A use-after-free flaw was found in the Linux kernel’s net/sunrpc/xprt.c function in the Remote Procedure Call SunRPC protocol. This flaw allows a local attacker to crash the system, leading to a kernel information leak issue...
PT-2025-25972
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to potential memory leaks in the rpc sysfs xprt state change function. This occurs due to improper error handling when the function fails to grab the object xprt,...
PT-2022-37895
Уязвимость функции rpc sysfs xprt state change модуля net/sunrpc/sysfs.c реализации протокола RPC ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...
PT-2022-29269
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue concerns the SUNRPC component, where closed sockets are not properly flushed before being freed by the xs xprt free function. This is an automated identification of a potential...
PT-2022-29613
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the SUNRPC component, where closed sockets are not properly flushed before being freed by the xs xprt free function. This is an automated identification of a potential...
PT-2022-2155
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.17.2 Description The issue is related to the SUNRPC subsystem in the Linux kernel, where the function xs xprt free can be called before ensuring that sockets are in the intended state. This is due to errors in...
PT-2022-28688
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to reference count leaks in rpc sysfs xprt state change. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...
PT-2022-28763
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to reference count leaks in rpc sysfs xprt state change. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...
DEBIAN-CVE-2018-14622
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefdxprt was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an...