oss-security - kernel: CVE-2018-16871 nfs: NULL pointer dereference due to an anomalized NFS message sequence

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Date: Mon, 3 Jun 2019 12:51:07 +1000
From: Wade Mealing <wmealing@...hat.com>
To: oss-security@...ts.openwall.com
Subject: kernel: CVE-2018-16871 nfs: NULL pointer dereference due to an
 anomalized NFS message sequence

A flaw was found in NFS in the Linux Kernel. An attacker who is able
to mount an exported NFS file system  is able to trigger a null
pointer dereference by an invalid NFS sequence.

This can panic the machine with a null pointer dereference and
therefore deny to the NFS server. Any outstanding disk writes to the
NFS server will be lost.

Upstream fix:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=01310bb7c9c98752cc763b36532fab028e0f8f81

Red Hat bugzilla:

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871

Thanks,

Wade Mealing

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.