CVE-2023-1652

A use-after-free flaw was found in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem...

PT-2023-35161

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.91 Description The issue is related to a use-after-free in the nfsd4 ssc setup dul function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2023-35019 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to a use-after-free in the nfsd4 ssc setup dul function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-35077

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.7 Description The issue concerns the handling of cached open files in the nfsd4 open codepath. It was introduced in version v5.19 and fixed in version v6.1.7. The actual impact and attack plausibility have n...

PT-2025-38360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the nfsd4 ssc umount item component within the kernel's NFS daemon NFSD. Specifically, the reference count is not decremented under error conditions,...

PT-2023-36657

Уязвимость функции nfsd4 copy модуля fs/nfsd/nfs4proc.c поддержки сетевой файловой системы NFS ядра операционной системы Linux связана с некорректным учётом числа ссылок refcount при использовании ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2023-2065

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to a use-after-free flaw in the NFS filesystem in the Linux Kernel, specifically in the nfsd4 ssc setup dul function in fs/nfsd/nfs4proc.c. This flaw could allow a...

PT-2021-26795

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to an exposure in the nfsd4 decode bitmap function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2021-30790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description The issue is related to an exposure in the nfsd4 decode bitmap function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

Fix of CVE: CVE-2021-38160, CVE-2021-3573, CVE-2021-38205, CVE-2021-3178, CVE-2021-20265, CVE-2021-3612, CVE-2021-32399, CVE-2021-37159, CVE-2014-4508, CVE-2021-28972, CVE-2021-34693, CVE-2021-20292

ELSCVE-666: CVE-2021-34693: can: bcm: fix infoleak in struct bcmmsghead - ELSCVE-705: CVE-2021-38160: virtioconsole: Assure used length from device is limited - ELSCVE-769: CVE-2014-4508: x8632, entry: Do syscall exit work on badsys CVE-2014-4508 - ELSCVE-844: CVE-2021-3573: Bluetooth: use...

Oracle Linux 6 : kernel (ELSA-2017-1723)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1723 advisory. - mm enlarge stack guard gap Larry Woodman 1452729 1452730 CVE-2017-1000364 CVE-2017-1000366 - fs nfsd: stricter decoding of write-like NFSv2/v3 ops J. Bruce...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-562)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-7618: crypto/ahash.c in the Linux kernel allowed attackers to cause a denial of service API operation calling its own callback, and infinite recursion by...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-7618: crypto/ahash.c in the Linux kernel allowed attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggeri...

kernel security and bug fix update

2.6.9-89.0.26.0.1.EL - XEN fix cpu hotplug crash Joe Jin orabug 7521308 - XEN Bring up vcpus before khelper init Joe Jin orabug 7521308 - XEN flush the tlb cache immediately Dave McCracken, Scott Shi orabug 9138767 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug...

CVE-2009-3623

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...

CVE-2009-3623

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...

CVE-2009-3623

CVE-2009-3623 affects the Linux kernel (nfsd4) via the lookup_cb_cred function in fs/nfsd/nfs4callback.c. When a client uses AUTH_NULL for NFSv4, the code may access the credentials cache and trigger a NULL pointer dereference, causing a denial of service (system crash). The public details come f...

CVE-2009-3623

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...

CVE-2009-3623: Improper Authentication

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...

CVE-2009-3623

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...