Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.4

CVE-2025-38724: Linux kernel NFS server risk of crash or manipulation

CVE-2025-38724 · published 1 year ago
Summary

The NFS server component in the Linux kernel could mishandle a client confirmation request, potentially leading to memory errors that may crash the server or be exploited. This affects Linux kernels used in Debian, Ubuntu, AWS, Azure and other distributions. Updating the kernel to the latest version provided by your vendor will apply the fix.

What to do
  • Update debian rootio-linux to version 6.1.159-1.root.io.75.
  • Update linux to version 6.1.187-1.aikido.166.
  • Update rootio-linux to version 6.1.187-1.aikido.166.
  • Update canonical linux-bluefield to version 6.8.0-1016.20.
  • Update canonical linux-aws-5.15 to version 5.15.0-1097.104~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1102.111~20.04.1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1097.106~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-163.173~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1091.94~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1092.98~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-163.173~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1049.49~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1094.100~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1092.96~20.04.1.
  • Update canonical linux to version 5.15.0-163.173.
  • Update canonical linux-aws to version 5.15.0-1097.104.
  • Update canonical linux-aws-6.8 to version 6.8.0-1046.49~22.04.1.
  • Update canonical linux-azure to version 5.15.0-1101.110.
  • Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
  • Update canonical linux-gcp to version 5.15.0-1097.106.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1047.50~22.04.2.
  • Update canonical linux-gke to version 5.15.0-1093.99.
  • Update canonical linux-gkeop to version 5.15.0-1080.88.
  • Update canonical linux-hwe-6.8 to version 6.8.0-100.100~22.04.1.
  • Update canonical linux-ibm to version 5.15.0-1091.94.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1044.44~22.04.1.
  • Update canonical linux-intel-iotg to version 5.15.0-1092.98.
  • Update canonical linux-kvm to version 5.15.0-1089.94.
  • Update canonical linux-lowlatency to version 5.15.0-163.173.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-100.100.1~22.04.1.
  • Update canonical linux-nvidia to version 5.15.0-1092.93.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1046.49~22.04.1.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1049.49.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1038.38.
  • Update canonical linux-oracle to version 5.15.0-1094.100.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1043.44~22.04.1.
  • Update canonical linux-raspi to version 5.15.0-1091.94.
  • Update canonical linux-riscv-6.8 to version 6.8.0-100.100~22.04.1.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1061.65.
  • Update canonical linux-bluefield to version 5.15.0-1081.83.
  • Update canonical linux-aws-fips to version 5.15.0-1097.104+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1101.110+fips1.
  • Update canonical linux-fips to version 5.15.0-163.173+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1097.106+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1089.91.
  • Update canonical linux-realtime to version 5.15.0-1096.105.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1041.42~22.04.1.
  • Update canonical linux to version 6.8.0-100.100.
  • Update canonical linux-aws to version 6.8.0-1046.49.
  • Update canonical linux-azure to version 6.8.0-1046.52.
  • Update canonical linux-gcp to version 6.8.0-1047.50.
  • Update canonical linux-gke to version 6.8.0-1043.48.
  • Update canonical linux-gkeop to version 6.8.0-1030.33.
  • Update canonical linux-ibm to version 6.8.0-1044.44.
  • Update canonical linux-lowlatency to version 6.8.0-100.100.1.
  • Update canonical linux-nvidia to version 6.8.0-1046.49.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1046.49.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
  • Update canonical linux-oracle to version 6.8.0-1043.44.
  • Update canonical linux-raspi to version 6.8.0-1047.51.
  • Update canonical linux-xilinx to version 6.8.0-1023.24.
  • Update canonical linux-aws-fips to version 6.8.0-1046.49+fips1.
  • Update canonical linux-azure-fips to version 6.8.0-1046.52+fips1.
  • Update canonical linux-fips to version 6.8.0-100.100+fips1.
  • Update canonical linux-gcp-fips to version 6.8.0-1047.50+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2037.38.
  • Update canonical linux-realtime to version 6.8.1-1041.42.
  • Update debian rootio-linux to version 5.10.247-1.root.io.42.
  • Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.82.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
  • Update linux linux to version 3f252a73e81aa01660cb426735eab932e6182e8d or later.
Affected software
Ecosystem VendorProductAffected versions
Root:Debian:12 debian rootio-linux < 6.1.159-1.root.io.75
Fix: upgrade to 6.1.159-1.root.io.75
– linux linux_kernel >= 3.17, < 5.4.297
>= 5.5, < 5.10.241
>= 5.11, < 5.15.190
>= 5.16, < 6.1.149
>= 6.2, < 6.6.103
>= 6.7, < 6.12.43
>= 6.13, < 6.15.11
>= 6.16, < 6.16.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Root:Debian:12 – linux < 6.1.187-1.aikido.166
Fix: upgrade to 6.1.187-1.aikido.166
Root:Debian:12 – rootio-linux < 6.1.187-1.aikido.166
Fix: upgrade to 6.1.187-1.aikido.166
– linux linux < 3f252a73e81aa01660cb426735eab932e6182e8d
3.17
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1016.20
Fix: upgrade to 6.8.0-1016.20
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:Pro:18.04:LTS canonical linux All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-kvm All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips All versions
Showing 50 of 235. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:20.04:LTS canonical linux All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1097.104~20.04.1
Fix: upgrade to 5.15.0-1097.104~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1102.111~20.04.1
Fix: upgrade to 5.15.0-1102.111~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1097.106~20.04.1
Fix: upgrade to 5.15.0-1097.106~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-163.173~20.04.1
Fix: upgrade to 5.15.0-163.173~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1091.94~20.04.1
Fix: upgrade to 5.15.0-1091.94~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1092.98~20.04.1
Fix: upgrade to 5.15.0-1092.98~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-163.173~20.04.1
Fix: upgrade to 5.15.0-163.173~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1049.49~20.04.1
Fix: upgrade to 5.15.0-1049.49~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1094.100~20.04.1
Fix: upgrade to 5.15.0-1094.100~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1092.96~20.04.1
Fix: upgrade to 5.15.0-1092.96~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-163.173
Fix: upgrade to 5.15.0-163.173
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1097.104
Fix: upgrade to 5.15.0-1097.104
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1046.49~22.04.1
Fix: upgrade to 6.8.0-1046.49~22.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1101.110
Fix: upgrade to 5.15.0-1101.110
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1051.57~22.04.1
Fix: upgrade to 6.8.0-1051.57~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1097.106
Fix: upgrade to 5.15.0-1097.106
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1047.50~22.04.2
Fix: upgrade to 6.8.0-1047.50~22.04.2
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1093.99
Fix: upgrade to 5.15.0-1093.99
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1080.88
Fix: upgrade to 5.15.0-1080.88
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-100.100~22.04.1
Fix: upgrade to 6.8.0-100.100~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1091.94
Fix: upgrade to 5.15.0-1091.94
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1044.44~22.04.1
Fix: upgrade to 6.8.0-1044.44~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1092.98
Fix: upgrade to 5.15.0-1092.98
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1089.94
Fix: upgrade to 5.15.0-1089.94
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-163.173
Fix: upgrade to 5.15.0-163.173
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-100.100.1~22.04.1
Fix: upgrade to 6.8.0-100.100.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1092.93
Fix: upgrade to 5.15.0-1092.93
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1046.49~22.04.1
Fix: upgrade to 6.8.0-1046.49~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1049.49
Fix: upgrade to 5.15.0-1049.49
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1038.38
Fix: upgrade to 5.15.0-1038.38
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1094.100
Fix: upgrade to 5.15.0-1094.100
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1043.44~22.04.1
Fix: upgrade to 6.8.0-1043.44~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1091.94
Fix: upgrade to 5.15.0-1091.94
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-100.100~22.04.1
Fix: upgrade to 6.8.0-100.100~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1061.65
Fix: upgrade to 5.15.0-1061.65
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1081.83
Fix: upgrade to 5.15.0-1081.83
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1097.104+fips1
Fix: upgrade to 5.15.0-1097.104+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1101.110+fips1
Fix: upgrade to 5.15.0-1101.110+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-163.173+fips1
Fix: upgrade to 5.15.0-163.173+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1097.106+fips1
Fix: upgrade to 5.15.0-1097.106+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1089.91
Fix: upgrade to 5.15.0-1089.91
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1096.105
Fix: upgrade to 5.15.0-1096.105
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1041.42~22.04.1
Fix: upgrade to 6.8.1-1041.42~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-100.100
Fix: upgrade to 6.8.0-100.100
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1046.49
Fix: upgrade to 6.8.0-1046.49
Ubuntu:24.04:LTS canonical linux-aws-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1046.52
Fix: upgrade to 6.8.0-1046.52
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde All versions
Ubuntu:24.04:LTS canonical linux-azure-fde-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1047.50
Fix: upgrade to 6.8.0-1047.50
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1043.48
Fix: upgrade to 6.8.0-1043.48
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1030.33
Fix: upgrade to 6.8.0-1030.33
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.14 All versions
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1044.44
Fix: upgrade to 6.8.0-1044.44
Ubuntu:24.04:LTS canonical linux-intel All versions
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-100.100.1
Fix: upgrade to 6.8.0-100.100.1
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1046.49
Fix: upgrade to 6.8.0-1046.49
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1046.49.1
Fix: upgrade to 6.8.0-1046.49.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1020.20
Fix: upgrade to 6.8.0-1020.20
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1043.44
Fix: upgrade to 6.8.0-1043.44
Ubuntu:24.04:LTS canonical linux-oracle-6.14 All versions
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1047.51
Fix: upgrade to 6.8.0-1047.51
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1023.24
Fix: upgrade to 6.8.0-1023.24
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1046.49+fips1
Fix: upgrade to 6.8.0-1046.49+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1046.52+fips1
Fix: upgrade to 6.8.0-1046.52+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-100.100+fips1
Fix: upgrade to 6.8.0-100.100+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1047.50+fips1
Fix: upgrade to 6.8.0-1047.50+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2037.38
Fix: upgrade to 6.8.0-2037.38
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1041.42
Fix: upgrade to 6.8.1-1041.42
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 All versions
Ubuntu:25.10 canonical linux-azure-fde All versions
Ubuntu:26.04:LTS canonical linux-gke All versions
Ubuntu:26.04:LTS canonical linux-nvidia-bos All versions
– debian debian_linux 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Root:Debian:11 debian rootio-linux < 5.10.247-1.root.io.42
Fix: upgrade to 5.10.247-1.root.io.42
Root:Ubuntu:24.04 canonical rootio-linux < 6.8.0-134.134.root.io.80
< 6.8.0-136.136.root.io.82
< 6.8.0-136.136.root.io.83
Fix: upgrade to 6.8.0-134.134.root.io.80
Original advisory text
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm()...
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF. Fix this by getting a reference early in the case where there is an extant confirmed client. If that fails then treat it as if there were no confirmed client found at all. In the case where the unconfirmed client is expiring, just fail and return the result from get_client_locked().
References
Severity
9.4 Critical
CVSS 3.1: 7.8 (NVD)
CVSS 3.1: 7.8 (OSV)
Exploitation
EPSS <1%
Type
CWE-416Use After Free
Timeline
Published4 Sep 2025
Updated25 Sep 2026
First seen6 Mar 2026
Track software like this
Free during beta