CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the NFS daemon (nfsd) due to inadequate validation of the `nseconds` value in TIME_DELEG decode paths, allowing a malformed timespec to potentially propagate to disk. This flaw could lead to unexpected behavior or data corruption in NFS operations. Organizations using Linux systems with NFS services should prioritize patching to mitigate the risk of data integrity issues.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME_DELEG decode paths The xdrgen-based TIME_DELEG_ACCESS and TIME_DELEG_MODIFY decode arms store a raw uint32_t nseconds directly into tv_nsec without enforcing nseconds < NSEC_PER_SEC. The legacy nfsd4_decode_nfstime4 has this check but the TIME_DELEG paths do not. A malformed timespec can propagate through notify_change() to disk. Add range checks in both nfs4xdr.c (SETATTR path) and nfs4callback.c (CB_GETATTR path).