NFSD: Underflow Vulnerability in nfssvc_decode_writeargs()
Summary
GSD-2022-1001927: NFSD: prevent underflow in nfssvc_decode_writeargs(). Affects Kernel versions < 614a61e1592051cc42d3c38f899c9f7bdaad8a1d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The NFSD (Network File System Daemon) is a component of the Linux Kernel that provides support for the NFS protocol. It allows remote clients to access files and directories on a server over a network. The nfssvc_decode_writeargs() function is responsible for decoding write arguments in NFS requests. This vulnerability affects the Linux Kernel.
Vulnerability Detail
The nfssvc_decode_writeargs() function in the NFSD component of the Linux Kernel is vulnerable to an underflow issue. An attacker could exploit this vulnerability by sending a specially crafted NFS request, leading to a buffer underflow. This could potentially result in memory corruption or arbitrary code execution on the affected system. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at this time.
Conclusion
The NFSD component of the Linux Kernel is vulnerable to an underflow issue in the nfssvc_decode_writeargs() function. This vulnerability has been fixed in Linux Kernel version v5.15.33. It is crucial to update the Linux Kernel to ensure the security of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
NFSD (Network File System Daemon) is a component of the Linux Kernel that provides support for the NFS protocol. It allows remote clients to access files and directories on a server over a network.
The nfssvc_decode_writeargs() function is responsible for decoding write arguments in NFS requests.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could result in memory corruption or arbitrary code execution on the affected system.
Yes, this vulnerability has been fixed in Linux Kernel version v5.15.33 by commit 614a61e1592051cc42d3c38f899c9f7bdaad8a1d.
To protect your system, it is recommended to update your Linux Kernel to version v5.15.33 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
