CVE-2022-48829

CVE-2022-48829

Critical · published July 16, 2024

CVSS v3.1
9.1
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes

iattr::ia_size is a loff_t, so these NFSv3 procedures must be

careful to deal with incoming client size values that are larger

than s64_max without corrupting the value.

Silently capping the value results in storing a different value

than the client passed in which is unexpected behavior, so remove

the min_t() check in decode_sattr3().

Note that RFC 1813 permits only the WRITE procedure to return

NFS3ERR_FBIG. We believe that NFSv3 reference implementations

also return NFS3ERR_FBIG when ia_size is too large.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00653 · 50.7th percentile
Published
2024-07-16T16:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel< 5.4.2955.4.295
linux/linux_kernel≥ 5.5, < 5.10.2205.10.220
linux/linux_kernel≥ 5.11, < 5.15.245.15.24
linux/linux_kernel≥ 5.16, < 5.16.105.16.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (11)
EPSS history
Timeline
  • 16 JUL 11:44Z
    NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
    cvelistv5