Description
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.5 | DSA-1636-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | kernel-rt +9 | 2.6.24.7-81.el5rt | RHSA-2008:0857 |
Advisories 2
- DSA-1636-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2008:0857 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- [oss-security] 20080904 CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl mailing-list
- [oss-security] 20080904 Re: CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl mailing-list
- 32190 third-party-advisory
- 32393 third-party-advisory
- DSA-1636 vendor-advisory
- 31881 third-party-advisory
- USN-659-1 vendor-advisory
- [linux-kernel] 20080903 [patch 05/16] nfsd: fix buffer overrun decoding NFSv4 acl mailing-list
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f
- RHSA-2008:0857 vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4
- 31133 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=461101
- linux-kernel-nfsv4-bo(45055) vdb-entry