CVE-2022-50235

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Protect against send buffer overflow in NFSv2 READDIR

Restore the previous limit on the @count argument to prevent a buffer overflow attack.

This vulnerability is rated with a Moderate severity rather than Important because exploitation requires the system to actively run a kernel NFS server with the legacy NFSv2 protocol enabled, which is not active by default in standard Red Hat Enterprise Linux deployments. The flaw exists in the NFS server's handling of NFSv2 directory read operations where an unbounded count parameter can cause a buffer overflow. Systems that do not export NFS shares or that operate exclusively with modern NFS versions are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.