9.1
Critique
CVE-2022-48828 In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a…
Description
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and NFSv4 both define file size as an unsigned 64-bit type. Thus there is a range of valid file size values an NFS client can send that is already larger than Linux can handle. Currently decode_fattr4() dumps a full u64 value into ia_size. If that value happens to be larger than S64_MAX, then ia_size underflows. I'm about to fix up the NFSv3 behavior as well, so let's catch the underflow in the common code path: nfsd_setattr().
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 5.17 | premières → < 5.17 | 5.17 |
| Linux 5.16 | premières → < 5.16.10 | 5.16.10 |
| Linux 5.15 | premières → < 5.15.24 | 5.15.24 |
| Linux 5.10 | premières → < 5.10.220 | 5.10.220 |
| Linux 5.4 | premières → < 5.4.295 | 5.4.295 |
| Linux | 2.6.12 | Pas de correctif indiqué |
| RUGGEDCOM RST2428P | Versions non publiées | |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | Versions non publiées | |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family | Versions non publiées |
Afficher l’autre branche Masquer l’autre branche
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1.1 | 1.1.1 |
Autres CVE de Linux
Les 18300 CVE de Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Non notée
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Non notée
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Non notée
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Non notée