344 matches found
CVE-2022-50821
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails Mitigation To mitigate this issue, prevent module sunrpc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to...
SUSE CVE-2022-50821
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993170)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993170 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthreadstop may prevent the threadfn from eve...
Linux Distros Unpatched Vulnerability : CVE-2023-54269
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: double free xprtctxt while still in use When an RPC request is deferred, the rqxprtctxt pointer is moved out of the svcrqst into the svcdeferredreq. Whe...
EUVD-2022-55877
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...
CVE-2023-54269
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprtctxt while still in use When an RPC request is deferred, the rqxprtctxt pointer is moved out of the svcrqst into the svcdeferredreq. When the deferred request is revisited, the pointer is copied into the n...
CVE-2022-50821
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...
CVE-2022-50821
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...
CVE-2023-54269
The CVE-2023-54269 issue affects the Linux kernel SUNRPC code. A deferred RPC path could reuse a freed xprt context if a request is revisited after a second defer, leading to a use-after-free-like scenario and potential oops when freeing the context. The root cause is that rq_xprt_ctxt was not cl...
CVE-2023-54269 SUNRPC: double free xprt_ctxt while still in use
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprtctxt while still in use When an RPC request is deferred, the rqxprtctxt pointer is moved out of the svcrqst into the svcdeferredreq. When the deferred request is revisited, the pointer is copied into the n...
CVE-2023-54269 SUNRPC: double free xprt_ctxt while still in use
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprtctxt while still in use When an RPC request is deferred, the rqxprtctxt pointer is moved out of the svcrqst into the svcdeferredreq. When the deferred request is revisited, the pointer is copied into the n...
CVE-2022-50821 SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...
CVE-2022-50821
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly cleaning up the rqxprtctxt pointer in SUNRPC, which could lead to a double release...
PT-2025-53939
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's SUNRPC implementation. Specifically, a memory leak can occur within the gss read proxy verf function when processing network object netobj data. This...
PT-2025-54098
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SUNRPC implementation that could lead to a double-free condition of the xprt ctxt pointer while it is still in use. This occurs when an RPC request is...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53174)
SUNRPC: The function cshow was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cacheget is called. This plugin only works with Tenable.ot. Please visit...
EUVD-2025-124954
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...
CVE-2025-40129
CVE-2025-40129 is a Linux kernel vulnerability addressed in Unity Linux/UTSA-2026-013110: sunrpc may dereference checksum.data due to a zero-length checksum in xdr_stream_decode_opaque_auth(), causing a null pointer dereference when gss_krb5_verify_mic_v2() accesses checksum.data. The patch ensur...
CVE-2025-40129
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...