NULL pointer dereference vulnerability in NFS client in Linux kernel before 4.2.2

CVE-2015-8746 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) via crafted network traffic.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.