A critical integer overflow vulnerability in the Linux kernel NFSv2 subsystem could allow unauthenticated attackers to trigger memory corruption and cause system instability or data integrity issues.

The vulnerability exists in the nfsd component within the NFSv2 sattr decoder. An unauthenticated attacker can supply a malformed time argument with an out of range useconds value, causing an integer wrap during the conversion to nanoseconds, which results in memory corruption before validation can occur.

Successful exploitation of this vulnerability can lead to unauthorized data modification or system crashes, impacting the availability and integrity of services relying on NFSv2. Given the CVSS score of 8.2, this represents a significant risk to enterprise environments where NFS is utilized for storage, as it allows unauthenticated remote attackers to interfere with file attributes.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later to incorporate the necessary input validation checks.

Proactive Monitoring: Monitor system logs for repeated RPC GARBAGE_ARGS errors or kernel panics associated with NFS traffic, which may indicate attempted exploitation.

Compensating Controls: If patching is not immediately feasible, restrict access to the NFS service to trusted network segments and disable NFSv2 support in favor of more secure versions like NFSv4.

Public Exploit Available: No

This vulnerability presents a high risk due to its potential for kernel level memory corruption. Administrators should prioritize patching the Linux kernel across all affected systems. Ensuring that kernel versions are updated to the specified secure releases is the most effective way to mitigate the risk of unauthorized attribute manipulation and system instability.