CVE-2022-48829: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
iattr::iasize is a lofft, so these NFSv3 procedures must be careful to deal with incoming client size values that are larger than s64max without corrupting the value.
Silently capping the value results in storing a different value than the client passed in which is unexpected behavior, so remove the mint() check in decodesattr3().
Note that RFC 1813 permits only the WRITE procedure to return NFS3ERRFBIG. We believe that NFSv3 reference implementations also return NFS3ERRFBIG when iasize is too large.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.10.220 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.24 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.16.10 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.17
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48829?
CVE-2022-48829 has been classified with a medium severity, indicating potential security concerns that require attention.
How do I fix CVE-2022-48829?
To fix CVE-2022-48829, you should upgrade the Linux kernel to at least version 5.10.220, 5.15.24, 5.16.10, or 5.17.
Which systems are affected by CVE-2022-48829?
CVE-2022-48829 affects various Linux systems running the kernel versions prior to the specified remediation versions.
What type of vulnerability is CVE-2022-48829?
CVE-2022-48829 is a vulnerability in the Linux kernel related to the NFSv3 handling of large file sizes.
What are the potential impacts of CVE-2022-48829?
The impacts of CVE-2022-48829 could include data corruption or denial of service due to improper handling of file size values.