PT-2022-31489

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to NFSv4, where layoutget locks are held across multiple RPC calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31746

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.122 Description The issue is related to NFSv4, where layoutget locks are held across multiple RPC calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31175

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.15 Description The issue is related to NFSv4, where layoutget locks are held across multiple RPC calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

kernel: NFSv4 server does not properly validate layout type when processing NFSv4 pNFS LAYOUTGET operand

It was found that the NFSv4 server in the Linux kernel did not properly validate layout type when processing NFSv4 pNFS LAYOUTGET and GETDEVICEINFO operands. A remote attacker could use this flaw to soft-lockup the system and thus cause denial of service...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

PT-2017-4330 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.3 Description: The issue is related to the NFSv4 server in the Linux kernel, which does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packe...