CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the nfsd component, specifically in the handling of the GETDEVICEINFO reply, where a mismatch in padding calculations can lead to the exposure of stale data to clients. This misalignment may result in unintended information disclosure and could disrupt the integrity of subsequent data decoding. Organizations using Linux systems that rely on NFS should prioritize addressing this issue to mitigate potential data leakage risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo nfsd4_ff_encode_getdeviceinfo() computes the da_addr_body reservation as 16 + netid_len + addr_len, but the subsequent xdr_encode_opaque() calls emit 8 + round_up(netid_len, 4) + round_up(addr_len, 4) bytes. The mismatch means the declared da_addr_body length exceeds the actual encoded data by 2-8 bytes on every flexfile GETDEVICEINFO reply, leaking stale reply-page content to the client and mis-aligning the subsequent version list decode. Use xdr_align_size() for each string length to match what xdr_encode_opaque() actually writes.