Date: Mon, 3 Jun 2019 12:51:07 +1000 From: Wade Mealing <wmealing@...hat.com> To: oss-security@...ts.openwall.com Subject: kernel: CVE-2018-16871 nfs: NULL pointer dereference due to an anomalized NFS message sequence A flaw was found in NFS in the Linux Kernel. An attacker who is able to mount an exported NFS file system is able to trigger a null pointer dereference by an invalid NFS sequence. This can panic the machine with a null pointer dereference and therefore deny to the NFS server. Any outstanding disk writes to the NFS server will be lost. Upstream fix: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=01310bb7c9c98752cc763b36532fab028e0f8f81 Red Hat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871 Thanks, Wade Mealing
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.