Dave Wysochanski

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.7.0 **Description** The vulnerability is related to the NFS component of the Linux kernel. It is caused by incorrect locking in the `nfs netfs issue read()` function, which can lead to a deadlock when interrupts are not disabled while iterating through pages in the xarray to submit for NFS read. This issue can be reproduced with a specific test and may cause inconsistent lock state warnings on a lockdep-enabled kernel. The problem can occur when another page in the mapping is processed for writeback inside an interrupt, leading to a potential deadlock. **Recommendations** To resolve this issue, update the Linux kernel to a version that includes the fix for the `nfs netfs issue read()` xarray locking for writeback interrupt. As a temporary workaround, consider disabling the `nfs netfs issue read()` function until a patch is available. However, this may have performance implications and should be carefully evaluated before implementation. Note: The provided information does not specify the exact fixed version, so it is recommended to update to the latest available kernel version to ensure the inclusion of the necessary fix.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.4.0-rc5 **Description** The issue is related to the netfs module in the Linux kernel, where the function netfs rreq unlock folios() can cause an oops when a network filesystem using netfs implements a clamp length() function. This can lead to a denial of service. The problem arises when the function folio start fscache() is called multiple times for the same folio, resulting in a kernel bug. The estimated number of potentially affected devices is not specified. **Recommendations** To resolve the issue, update the Linux kernel to a version that includes the fix for the netfs vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 5.18.0-rc1-nfs-fscache-netfs+ #13 **Description** A slab-out-of-bounds issue has been identified in the `cachefiles set volume xattr` function of the Linux kernel. This issue occurs when the actual length of volume coherency data is not used when setting the xattr, resulting in a KASAN report. The bug is triggered by a write of size 4 at a specific address, causing the kernel to access memory outside the bounds of a slab allocation. The issue is related to the `cachefiles` module and the `fscache` workqueue. **Recommendations** For Linux kernel versions prior to 5.18.0-rc1-nfs-fscache-netfs+ #13, consider disabling the `cachefiles set volume xattr` function as a temporary workaround until a patch is available. Additionally, restricting access to the `cachefiles` module may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.