PT-2024-10533 · Linux+3 · Linux Kernel+3

Dan Aloni

·

Published

2022-02-09

·

Updated

2025-01-20

·

CVE-2022-48827

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the NFSD component in the Linux kernel, where a read operation near the OFFSET MAX value can cause a loff t overflow in the server, leading to an indefinite retry of the request by the client. The Linux NFS client does not handle the NFS error code EINVAL, which is permitted by NFS specifications for a READ operation. To resolve this, out-of-range READ requests are made to succeed and return a short result, with the EOF flag set to prevent the client from retrying the request. This behavior is consistent with Solaris NFS servers. Note that NFSv3 and NFSv4 use u64 offset values on the wire, which must be converted to loff t internally before use.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-01084
CVE-2022-48827
OESA-2024-1961
OESA-2024-1962
OESA-2024-1992
OPENSUSE-SU-2024_2947-1
OPENSUSE-SU-2024_3249-1
RHSA-2024:5266
RHSA-2024:5281
RHSA-2024:5282
SUSE-SU-2024:2892-1
SUSE-SU-2024:2894-1
SUSE-SU-2024:2901-1
SUSE-SU-2024:2902-1
SUSE-SU-2024:2929-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2940-1
SUSE-SU-2024:2947-1
SUSE-SU-2024:3225-1
SUSE-SU-2024:3249-1

Affected Products

Astra Linux
Linux Kernel
Red Os
Suse