Description
In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the "len * sizeof(*p)" operation can have an integer overflow.
References (7)
Core 7
Core References
Scores
CVSS v3
5.5
EPSS
0.0025
EPSS Percentile
15.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-190
Status
published
Products (23)
linux/Kernel
4.17.0 - 4.19.238linux
linux/Kernel
4.20.0 - 5.4.189linux
linux/Kernel
5.11.0 - 5.15.33linux
linux/Kernel
5.16.0 - 5.16.19linux
linux/Kernel
5.17.0 - 5.17.2linux
linux/Kernel
5.5.0 - 5.10.110linux
Linux/Linux
< 4.17
Linux/Linux
37c88763def8474bc0972fbd1adb0d21670104b7 - 23a9dbbe0faf124fc4c139615633b9d12a3a89ef
Linux/Linux
37c88763def8474bc0972fbd1adb0d21670104b7 - 303cd6173dce0a28d26526c77814eb90a41bd898
Linux/Linux
37c88763def8474bc0972fbd1adb0d21670104b7 - 3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8
... and 13 more
Published
Feb 26, 2025
Tracked Since
Feb 18, 2026