NFSv4.2: Reference Count Leaks in _nfs42_proc_copy_notify()
Summary
GSD-2022-1001377: NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify(). Affects Kernel versions < fb73bf6305f4eb8f0cf9a61ee874d55f019d6dc4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is a critical component of the Linux operating system that provides the core functionality and interfaces for various hardware devices, file systems, and system resources. It acts as a bridge between the hardware and software layers, facilitating communication and resource management. The NFSv4.2 protocol is a network file system protocol that allows remote file access and sharing over a network. It is implemented within the Kernel package and is susceptible to reference count leaks in the _nfs42_proc_copy_notify() function.
Vulnerability Detail
The vulnerability in the _nfs42_proc_copy_notify() function of the NFSv4.2 protocol can lead to reference count leaks. This can result in memory leaks and potential resource exhaustion, leading to system instability or denial of service. Attackers may exploit this vulnerability to exhaust system resources, causing a degradation in performance or even a complete system crash. The vulnerability has been addressed in Linux Kernel version v5.16.20 by commit fb73bf6305f4eb8f0cf9a61ee874d55f019d6dc4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel package.
Conclusion
The vulnerability in the _nfs42_proc_copy_notify() function of the NFSv4.2 protocol can lead to reference count leaks, potentially causing memory leaks and resource exhaustion. It is crucial to update the Linux Kernel package to version v5.16.20 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to memory leaks and resource exhaustion, potentially causing system instability or denial of service.
Attackers can exploit this vulnerability to exhaust system resources, leading to performance degradation or system crashes.
Yes, the vulnerability has been fixed in Linux Kernel version v5.16.20 by commit fb73bf6305f4eb8f0cf9a61ee874d55f019d6dc4.
To update the Linux Kernel package, follow the official update process provided by your Linux distribution or manually compile and install the updated Kernel version.
No specific workaround has been mentioned for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel package.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
