CVE-2023-53680

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the Network File System daemon (NFSD). Specifically, the OPDESC() function does not perform adequate range checking on the operation number (opnum) it receives, assuming callers will avoid out-of-bounds values. The nfsd4 decode compound() function can invoke OPDESC() with opnum set to OP ILLEGAL (value 10044), which exceeds the bounds of the nfsd4 ops array. This can lead to undefined behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.