A critical memory management flaw in the Linux kernel nfsd component could allow an unauthenticated attacker to cause system instability or leak sensitive kernel memory.

The vulnerability exists in the nfsd_fh_verify and nfsd_fh_verify_err tracepoints, where server sockaddr slots are incorrectly sized based on xpt_remotelen but populated using xpt_locallen. This mismatch triggers a buffer overflow when xpt_locallen exceeds xpt_remotelen, or an information leak when the slot is oversized.

The CVSS score of 9.8 reflects the high potential for total system compromise. An attacker capable of triggering NFS/UDP requests can exploit this memory corruption to crash the kernel, resulting in denial of service, or potentially execute arbitrary code. Furthermore, the information leakage component may expose internal memory contents to unauthorized users, violating data confidentiality requirements.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unusual nfsd process behavior that may indicate exploitation attempts.

Compensating Controls: Restrict access to NFS services to trusted network segments and disable NFS/UDP if it is not strictly required for business operations.

Public Exploit Available: Unknown.

This vulnerability represents a significant risk to the stability and security of Linux environments. System administrators should prioritize testing and deploying the provided kernel updates across all affected infrastructure. Given the critical severity and the potential for kernel-level impact, immediate patching is strongly recommended to eliminate the risk of remote exploitation.