In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable crash if the cli…
Critical CVSS 9.8
Summary
In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable crash if the client sends a kernel RPC server a specially crafted packet. If decoding the RPC reply fails in such a way that SVC_GARBAGE is returned without setting the rq_accept_statp pointer, then that pointer can be dereferenced and a value stored there. If it's the first time the thread has processed an RPC, t…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/353e75b55e583635bf71cde6abcec274dba05edd Patch
- https://git.kernel.org/stable/c/599c489eea793821232a2f69a00fa57d82b0ac98 Patch
- https://git.kernel.org/stable/c/94d10a4dba0bc482f2b01e39f06d5513d0f75742 Patch
- https://git.kernel.org/stable/c/c90459cd58bb421d275337093d8e901e0ba748dd Patch
- https://github.com/keymaker-arch/NFSundown Exploit
- https://www.openwall.com/lists/oss-security/2025/07/02/2 Mailing List
- http://www.openwall.com/lists/oss-security/2025/07/02/2 Mailing List
Timeline
- nvd_ingest NVD