F5-K000160079: Medium severity F5 BIG-IP vulnerability
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister() Currently, nfsdprocstatinit() ignores the return value of svcprocregister(). If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix nfsdprocstatinit() to return the same type of pointer as svcprocregister(), and fix up nfsdnetinit() to check that and fail the nfsdnet construction if it occurs. svcprocregister() can fail if the dentry can't be allocated, or if an identical dentry already exists. The second case is pretty unlikely in the nfsdnet construction codepath, so if this happens, return -ENOMEM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000160079?
The severity of F5-K000160079 is classified as high due to potential exploitation risks.
How do I fix F5-K000160079?
To fix F5-K000160079, upgrade to the latest version of the affected F5 products as specified in the advisory.
What versions are affected by F5-K000160079?
F5-K000160079 affects specific versions of F5 BIG-IP and F5 BIG-IQ Centralized Management between version ranges outlined in the advisory.
Is F5-K000160079 remotely exploitable?
Yes, F5-K000160079 could potentially be exploited remotely if unpatched systems are targeted.
What is the nature of the vulnerability in F5-K000160079?
F5-K000160079 involves the Linux kernel's nfsd process failing to handle return codes correctly, which may lead to undefined behavior.