CVE-2022-43945

The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SNPSCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
linuxlinux_kernel
𝑥
< 5.19.17
linuxlinux_kernel
6.0 ≤
𝑥
< 6.0.2
netappactive_iq_unified_manager
-
netapph300s_firmware
-
netapph500s_firmware
-
netapph700s_firmware
-
netapph410s_firmware
-
netapph410c_firmware
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
sid
6.11.5-1
fixed
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
noble
not-affected
mantic
not-affected
lunar
Fixed 6.1.0-16.16
released
kinetic
Fixed 5.19.0-26.27
released
jammy
Fixed 5.15.0-56.62
released
focal
Fixed 5.4.0-137.154
released
bionic
Fixed 4.15.0-202.213
released
xenial
Fixed 4.4.0-236.270
released
trusty
needed
linux-allwinner
noble
dne
mantic
dne
lunar
not-affected
kinetic
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-allwinner-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-aws
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
Fixed 5.19.0-1014.15
released
jammy
Fixed 5.15.0-1026.30
released
focal
Fixed 5.4.0-1094.102
released
bionic
Fixed 4.15.0-1148.160
released
xenial
Fixed 4.4.0-1153.168
released
trusty
Fixed 4.4.0-1115.121
released
linux-aws-5.0
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-aws-5.11
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-aws-5.13
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-aws-5.15
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-1026.30~20.04.2
released
bionic
dne
xenial
dne
trusty
dne
linux-aws-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-aws-5.3
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-aws-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 5.4.0-1094.102~18.04.1
released
xenial
dne
trusty
dne
linux-aws-5.8
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-aws-6.2
noble
dne
mantic
dne
lunar
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-aws-6.5
noble
dne
mantic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-aws-fips
noble
dne
mantic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-aws-hwe
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
Fixed 4.15.0-1148.160~16.04.1
released
trusty
dne
linux-azure
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
Fixed 5.19.0-1013.14
released
jammy
Fixed 5.15.0-1029.36
released
focal
Fixed 5.4.0-1101.107
released
bionic
ignored
xenial
Fixed 4.15.0-1159.174~16.04.1
released
trusty
Fixed 4.15.0-1159.174~14.04.1
released
linux-azure-4.15
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 4.15.0-1159.174
released
xenial
dne
trusty
dne
linux-azure-5.11
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-azure-5.13
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-azure-5.15
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-1029.36~20.04.1
released
bionic
dne
xenial
dne
trusty
dne
linux-azure-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-azure-5.3
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-azure-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 5.4.0-1101.107~18.04.1
released
xenial
dne
trusty
dne
linux-azure-5.8
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-azure-6.2
noble
dne
mantic
dne
lunar
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-azure-6.5
noble
dne
mantic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-azure-edge
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-azure-fde
kinetic
dne
jammy
Fixed 5.15.0-1029.36.1
released
focal
Fixed 5.4.0-1101.107
released
bionic
dne
xenial
dne
trusty
dne
linux-azure-fde-5.15
noble
dne
mantic
dne
jammy
dne
focal
Fixed 5.15.0-1029.36~20.04.1.1
released
bionic
dne
xenial
dne
trusty
dne
linux-azure-fde-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-azure-fde-6.2
noble
dne
mantic
dne
lunar
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-azure-fips
noble
dne
mantic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-bluefield
kinetic
dne
jammy
dne
focal
Fixed 5.4.0-1058.64
released
bionic
dne
xenial
dne
trusty
dne
linux-dell300x
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 4.15.0-1060.65
released
xenial
dne
trusty
dne
linux-fips
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
ignored
linux-gcp
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
Fixed 5.19.0-1013.14
released
jammy
Fixed 5.15.0-1025.32
released
focal
Fixed 5.4.0-1098.107
released
bionic
ignored
xenial
Fixed 4.15.0-1143.159~16.04.1
released
trusty
dne
linux-gcp-4.15
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 4.15.0-1143.159
released
xenial
dne
trusty
dne
linux-gcp-5.11
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-gcp-5.13
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-gcp-5.15
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-1025.32~20.04.2
released
bionic
dne
xenial
dne
trusty
dne
linux-gcp-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-gcp-5.3
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-gcp-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 5.4.0-1098.107~18.04.1
released
xenial
dne
trusty
dne
linux-gcp-5.8
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-gcp-6.2
noble
dne
mantic
dne
lunar
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-gcp-6.5
noble
dne
mantic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-gcp-fips
noble
dne
mantic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-gke
noble
not-affected
kinetic
dne
jammy
Fixed 5.15.0-1023.28
released
focal
Fixed 5.4.0-1094.101
released
bionic
dne
xenial
ignored
trusty
dne
linux-gke-4.15
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-gke-5.0
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-gke-5.15
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-1023.28~20.04.2
released
bionic
dne
xenial
dne
trusty
dne
linux-gke-5.3
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-gke-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-gkeop
kinetic
dne
jammy
Fixed 5.15.0-1011.15
released
focal
Fixed 5.4.0-1062.66
released
bionic
dne
xenial
dne
trusty
dne
linux-gkeop-5.15
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-1011.15~20.04.2
released
bionic
dne
xenial
dne
trusty
dne
linux-gkeop-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-hwe
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
Fixed 4.15.0-202.213~16.04.1
released
trusty
dne
linux-hwe-5.11
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-hwe-5.13
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-hwe-5.15
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-56.62~20.04.1
released
bionic
dne
xenial
dne
trusty
dne
linux-hwe-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 5.4.0-137.154~18.04.1
released
xenial
dne
trusty
dne
linux-hwe-5.8
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-hwe-6.2
noble
dne
mantic
dne
lunar
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe-6.5
noble
dne
mantic
dne
lunar
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe-edge
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
ignored
trusty
dne
linux-ibm
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
Fixed 5.19.0-1013.14
released
jammy
Fixed 5.15.0-1021.24
released
focal
Fixed 5.4.0-1042.47
released
bionic
dne
xenial
dne
trusty
dne
linux-ibm-5.15
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-ibm-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 5.4.0-1042.47~18.04.1
released
xenial
dne
trusty
dne
linux-intel
noble
not-affected
mantic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-5.13
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-intel-iot-realtime
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-iotg
kinetic
dne
jammy
Fixed 5.15.0-1021.26
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-iotg-5.15
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-1021.26~20.04.1
released
bionic
dne
xenial
dne
trusty
dne
linux-iot
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
dne
focal
Fixed 5.4.0-1011.13
released
bionic
dne
xenial
dne
trusty
dne
linux-kvm
noble
dne
mantic
dne
lunar
ignored
kinetic
Fixed 5.19.0-1013.14
released
jammy
Fixed 5.15.0-1024.29
released
focal
Fixed 5.4.0-1084.90
released
bionic
Fixed 4.15.0-1134.139
released
xenial
Fixed 4.4.0-1116.126
released
trusty
dne
linux-laptop
noble
dne
mantic
not-affected
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
Fixed 5.19.0-1012.13
released
jammy
Fixed 5.15.0-56.62
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-5.15
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-56.62~20.04.1
released
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-6.2
noble
dne
mantic
dne
lunar
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-6.5
noble
dne
mantic
dne
lunar
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-xenial
kinetic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
Fixed 4.4.0-236.270~14.04.1
released
linux-nvidia
noble
not-affected
mantic
dne
lunar
dne
kinetic
dne
jammy
Fixed 5.15.0-1015.15
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-6.2
noble
dne
mantic
dne
lunar
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-6.5
noble
dne
mantic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-lowlatency
noble
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
ignored
trusty
dne
linux-oem-5.10
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-oem-5.13
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-oem-5.14
kinetic
dne
jammy
dne
focal
Fixed 5.14.0-1055.62
released
bionic
dne
xenial
dne
trusty
dne
linux-oem-5.17
noble
dne
mantic
dne
lunar
dne
kinetic
ignored
jammy
Fixed 5.17.0-1024.25
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem-5.6
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-oem-6.0
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
Fixed 6.0.0-1012.12
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem-6.1
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem-6.5
noble
dne
mantic
dne
lunar
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem-6.8
noble
not-affected
mantic
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem-osp1
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-oracle
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
Fixed 5.19.0-1013.14
released
jammy
Fixed 5.15.0-1025.31
released
focal
Fixed 5.4.0-1092.101
released
bionic
Fixed 4.15.0-1113.124
released
xenial
Fixed 4.15.0-1113.124~16.04.1
released
trusty
dne
linux-oracle-5.0
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-oracle-5.11
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-oracle-5.13
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-oracle-5.15
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-1025.31~20.04.2
released
bionic
dne
xenial
dne
trusty
dne
linux-oracle-5.3
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-oracle-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 5.4.0-1092.101~18.04.1
released
xenial
dne
trusty
dne
linux-oracle-5.8
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-oracle-6.5
noble
dne
mantic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-raspi
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
Fixed 5.19.0-1009.16
released
jammy
Fixed 5.15.0-1021.23
released
focal
Fixed 5.4.0-1079.90
released
bionic
dne
xenial
dne
trusty
dne
linux-raspi-5.4
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 5.4.0-1079.90~18.04.1
released
xenial
dne
trusty
dne
linux-raspi-realtime
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-raspi2
kinetic
dne
jammy
dne
focal
ignored
bionic
Fixed 4.15.0-1126.134
released
xenial
ignored
trusty
dne
linux-raspi2-5.3
kinetic
dne
jammy
dne
focal
dne
bionic
ignored
xenial
dne
trusty
dne
linux-realtime
noble
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-riscv
noble
not-affected
mantic
not-affected
lunar
ignored
kinetic
Fixed 5.19.0-1009.10
released
jammy
ignored
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-riscv-5.11
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-riscv-5.15
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
dne
focal
Fixed 5.15.0-1026.30~20.04.2
released
bionic
dne
xenial
dne
trusty
dne
linux-riscv-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-riscv-5.8
kinetic
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-riscv-6.5
noble
dne
mantic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-riscv-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-snapdragon
kinetic
dne
jammy
dne
focal
dne
bionic
Fixed 4.15.0-1144.154
released
xenial
ignored
trusty
dne
linux-starfive
noble
dne
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-starfive-5.19
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-starfive-6.2
noble
dne
mantic
dne
lunar
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-starfive-6.5
noble
dne
mantic
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-xilinx-zynqmp
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
not-affected
focal
Fixed 5.4.0-1021.25
released
bionic
dne
xenial
dne
trusty
dne