CVE-2022-43945

EUVD-2022-46915

04.11.2022, 19:15

The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	ADP	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 63%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	𝑥 < 5.19.17
linux	linux_kernel	6.0 ≤ 𝑥 < 6.0.2
netapp	active_iq_unified_manager	-
netapp	h300s_firmware	-
netapp	h500s_firmware	-
netapp	h700s_firmware	-
netapp	h410s_firmware	-
netapp	h410c_firmware	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
sid	6.11.5-1 fixed
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

bionic	Fixed 4.15.0-202.213 released
focal	Fixed 5.4.0-137.154 released
jammy	Fixed 5.15.0-56.62 released
kinetic	Fixed 5.19.0-26.27 released
lunar	Fixed 6.1.0-16.16 released
mantic	not-affected
noble	not-affected
trusty	needed
xenial	Fixed 4.4.0-236.270 released

linux-allwinner

bionic	dne
focal	dne
jammy	dne
kinetic	not-affected
lunar	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-allwinner-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws

bionic	Fixed 4.15.0-1148.160 released
focal	Fixed 5.4.0-1094.102 released
jammy	Fixed 5.15.0-1026.30 released
kinetic	Fixed 5.19.0-1014.15 released
lunar	ignored
mantic	not-affected
noble	not-affected
trusty	Fixed 4.4.0-1115.121 released
xenial	Fixed 4.4.0-1153.168 released

linux-aws-5.0

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-aws-5.11

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-aws-5.13

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-aws-5.15

bionic	dne
focal	Fixed 5.15.0-1026.30~20.04.2 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-aws-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.3

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-aws-5.4

bionic	Fixed 5.4.0-1094.102~18.04.1 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-aws-5.8

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-aws-6.2

bionic	dne
focal	dne
jammy	ignored
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-hwe

bionic	dne
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	Fixed 4.15.0-1148.160~16.04.1 released

linux-azure

bionic	ignored
focal	Fixed 5.4.0-1101.107 released
jammy	Fixed 5.15.0-1029.36 released
kinetic	Fixed 5.19.0-1013.14 released
lunar	ignored
mantic	not-affected
noble	not-affected
trusty	Fixed 4.15.0-1159.174~14.04.1 released
xenial	Fixed 4.15.0-1159.174~16.04.1 released

linux-azure-4.15

bionic	Fixed 4.15.0-1159.174 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-azure-5.11

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-azure-5.13

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-azure-5.15

bionic	dne
focal	Fixed 5.15.0-1029.36~20.04.1 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-azure-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.3

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-azure-5.4

bionic	Fixed 5.4.0-1101.107~18.04.1 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-azure-5.8

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-azure-6.2

bionic	dne
focal	dne
jammy	ignored
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-edge

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-azure-fde

bionic	dne
focal	Fixed 5.4.0-1101.107 released
jammy	Fixed 5.15.0-1029.36.1 released
kinetic	dne
trusty	dne
xenial	dne

linux-azure-fde-5.15

bionic	dne
focal	Fixed 5.15.0-1029.36~20.04.1.1 released
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fde-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fde-6.2

bionic	dne
focal	dne
jammy	ignored
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-bluefield

bionic	dne
focal	Fixed 5.4.0-1058.64 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-dell300x

bionic	Fixed 4.15.0-1060.65 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-fips

bionic	dne
focal	dne
jammy	dne
kinetic	dne
trusty	ignored
xenial	ignored

linux-gcp

bionic	ignored
focal	Fixed 5.4.0-1098.107 released
jammy	Fixed 5.15.0-1025.32 released
kinetic	Fixed 5.19.0-1013.14 released
lunar	ignored
mantic	not-affected
noble	not-affected
trusty	dne
xenial	Fixed 4.15.0-1143.159~16.04.1 released

linux-gcp-4.15

bionic	Fixed 4.15.0-1143.159 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gcp-5.11

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gcp-5.13

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gcp-5.15

bionic	dne
focal	Fixed 5.15.0-1025.32~20.04.2 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gcp-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.3

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gcp-5.4

bionic	Fixed 5.4.0-1098.107~18.04.1 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gcp-5.8

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gcp-6.2

bionic	dne
focal	dne
jammy	ignored
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gke

bionic	dne
focal	Fixed 5.4.0-1094.101 released
jammy	Fixed 5.15.0-1023.28 released
kinetic	dne
noble	not-affected
trusty	dne
xenial	ignored

linux-gke-4.15

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gke-5.0

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gke-5.15

bionic	dne
focal	Fixed 5.15.0-1023.28~20.04.2 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gke-5.3

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gke-5.4

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-gkeop

bionic	dne
focal	Fixed 5.4.0-1062.66 released
jammy	Fixed 5.15.0-1011.15 released
kinetic	dne
trusty	dne
xenial	dne

linux-gkeop-5.15

bionic	dne
focal	Fixed 5.15.0-1011.15~20.04.2 released
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gkeop-5.4

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-hwe

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	Fixed 4.15.0-202.213~16.04.1 released

linux-hwe-5.11

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-hwe-5.13

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-hwe-5.15

bionic	dne
focal	Fixed 5.15.0-56.62~20.04.1 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-hwe-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-5.4

bionic	Fixed 5.4.0-137.154~18.04.1 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-hwe-5.8

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-hwe-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-6.5

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-hwe-edge

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	ignored

linux-ibm

bionic	dne
focal	Fixed 5.4.0-1042.47 released
jammy	Fixed 5.15.0-1021.24 released
kinetic	Fixed 5.19.0-1013.14 released
lunar	ignored
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-ibm-5.15

bionic	dne
focal	not-affected
jammy	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-ibm-5.4

bionic	Fixed 5.4.0-1042.47~18.04.1 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-intel

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	dne

linux-intel-5.13

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-intel-iot-realtime

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-intel-iotg

bionic	dne
focal	dne
jammy	Fixed 5.15.0-1021.26 released
kinetic	dne
trusty	dne
xenial	dne

linux-intel-iotg-5.15

bionic	dne
focal	Fixed 5.15.0-1021.26~20.04.1 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-iot

bionic	dne
focal	Fixed 5.4.0-1011.13 released
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-kvm

bionic	Fixed 4.15.0-1134.139 released
focal	Fixed 5.4.0-1084.90 released
jammy	Fixed 5.15.0-1024.29 released
kinetic	Fixed 5.19.0-1013.14 released
lunar	ignored
mantic	dne
noble	dne
trusty	dne
xenial	Fixed 4.4.0-1116.126 released

linux-laptop

bionic	dne
focal	dne
jammy	dne
lunar	dne
mantic	not-affected
noble	dne
trusty	dne
xenial	dne

linux-lowlatency

bionic	dne
focal	dne
jammy	Fixed 5.15.0-56.62 released
kinetic	Fixed 5.19.0-1012.13 released
lunar	ignored
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-lowlatency-hwe-5.15

bionic	dne
focal	Fixed 5.15.0-56.62~20.04.1 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-6.2

bionic	dne
focal	dne
jammy	ignored
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-6.5

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-lts-xenial

bionic	dne
focal	dne
jammy	dne
kinetic	dne
trusty	Fixed 4.4.0-236.270~14.04.1 released
xenial	dne

linux-nvidia

bionic	dne
focal	dne
jammy	Fixed 5.15.0-1015.15 released
kinetic	dne
lunar	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	dne

linux-nvidia-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-nvidia-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-nvidia-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-nvidia-lowlatency

bionic	dne
focal	dne
jammy	dne
noble	not-affected
trusty	dne
xenial	dne

linux-oem

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	ignored

linux-oem-5.10

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oem-5.13

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oem-5.14

bionic	dne
focal	Fixed 5.14.0-1055.62 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oem-5.17

bionic	dne
focal	dne
jammy	Fixed 5.17.0-1024.25 released
kinetic	ignored
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-5.6

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oem-6.0

bionic	dne
focal	dne
jammy	Fixed 6.0.0-1012.12 released
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-6.1

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-6.5

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-6.8

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	dne

linux-oem-osp1

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oracle

bionic	Fixed 4.15.0-1113.124 released
focal	Fixed 5.4.0-1092.101 released
jammy	Fixed 5.15.0-1025.31 released
kinetic	Fixed 5.19.0-1013.14 released
lunar	ignored
mantic	not-affected
noble	not-affected
trusty	dne
xenial	Fixed 4.15.0-1113.124~16.04.1 released

linux-oracle-5.0

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oracle-5.11

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oracle-5.13

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oracle-5.15

bionic	dne
focal	Fixed 5.15.0-1025.31~20.04.2 released
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oracle-5.3

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oracle-5.4

bionic	Fixed 5.4.0-1092.101~18.04.1 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oracle-5.8

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-oracle-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi

bionic	dne
focal	Fixed 5.4.0-1079.90 released
jammy	Fixed 5.15.0-1021.23 released
kinetic	Fixed 5.19.0-1009.16 released
lunar	ignored
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-raspi-5.4

bionic	Fixed 5.4.0-1079.90~18.04.1 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-raspi-realtime

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi2

bionic	Fixed 4.15.0-1126.134 released
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	ignored

linux-raspi2-5.3

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-realtime

bionic	dne
focal	dne
jammy	ignored
noble	dne
trusty	dne
xenial	dne

linux-riscv

bionic	dne
focal	ignored
jammy	ignored
kinetic	Fixed 5.19.0-1009.10 released
lunar	ignored
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-riscv-5.11

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-riscv-5.15

bionic	dne
focal	Fixed 5.15.0-1026.30~20.04.2 released
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-5.8

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

linux-riscv-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-snapdragon

bionic	Fixed 4.15.0-1144.154 released
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	ignored

linux-starfive

bionic	dne
focal	dne
jammy	dne
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	dne
trusty	dne
xenial	dne

linux-starfive-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-starfive-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-starfive-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-xilinx-zynqmp

bionic	dne
focal	Fixed 5.4.0-1021.25 released
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

Common Weakness Enumeration

References

http://packetstormsecurity.com/files/171289/Kernel-Live-Patch-Security-Notice-LNS-0092-1.html

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8

https://security.netapp.com/advisory/ntap-20221215-0006/

http://packetstormsecurity.com/files/171289/Kernel-Live-Patch-Security-Notice-LNS-0092-1.html

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8

https://security.netapp.com/advisory/ntap-20221215-0006/