Loading story…
CVE-2022-24448 affects Linux kernel NFS directory-open handling: an application opening a path on a mounted NFS filesystem with O_DIRECTORY could receive an uninitialized file descriptor if the NFS server returned a regular file during lookup, rather than the expected ENOTDIR error. The resulting condition can disclose uninitialized kernel data to local, low-privileged users.
The upstream NFSv4 fix validates lookup results when LOOKUP_DIRECTORY is set and returns ENOTDIR for non-directory objects. Red Hat rated the issue CVSS 3.3 (Low) and released corrected kernel packages for affected RHEL 8, RHEL 8.6 EUS, RHEL 9, and Red Hat Virtualization 4 on RHEL 8; its RHEL 6 and RHEL 7 kernel variants are marked will not fix.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2022:7444 for RHEL 8 kernel-rt and RHSA-2022:7683 for the RHEL 8 kernel to fix CVE-2022-24448, an NFS flaw that could disclose uninitialized kernel data to userspace.
RHSA-2024:0724 fixed CVE-2022-24448 in the RHEL 8.6 Extended Update Support kernel and the Red Hat Virtualization 4 kernel for RHEL 8.
Red Hat issued RHSA-2022:8267 for the RHEL 9 kernel and RHSA-2022:7933 for RHEL 9 kernel-rt to address CVE-2022-24448.
Linux kernel commit ac795161c93699d600db16c1a8cc23a65a1eceaf was committed to validate directory lookup results in the NFS atomic-open path and return ENOTDIR for regular files, preventing return of a file descriptor with uninitialized open state.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat resolved **CVE-2024-54456**, a moderate-severity buffer-overflow flaw in the Linux kernel NFS client function `nfs_sysfs_link_rpc_client()`. The function appended an RPC program name of unknown length to a fixed 64-byte buffer using unsafe `strcat()` operations, creating a CWE-120 classic buffer-overflow condition. A local low-privileged attacker could potentially disclose information, corrupt memory, execute unauthorized code or commands, or cause a denial of service; Red Hat rates the issue CVSS 7.1, while NVD and CVE.org score it 7.8. The upstream remediation replaces the unsafe string handling with bounded `strscpy()` and `strncat()` calls. Red Hat issued corrected kernels for RHEL 9 and RHEL 10 and later supplied a fix for RHEL 9.6 Extended Update Support; organizations should apply the applicable kernel advisories and reboot into the updated kernel. Red Hat states that the RHEL 9 `kernel-rt` package will not receive a fix, and RHEL 8 is outside the supported remediation scope.
Aug 26, 2026
CVE-2024-26638 is a low-severity flaw in the Linux kernel's Network Block Device (NBD) driver, introduced in kernel version 5.19. Incomplete initialization of a `struct msghdr` in the NBD reply-receive path can expose the uninitialized `msg_get_inq` field during `tcp_recvmsg` processing, triggering a KMSAN uninitialized-value error and affecting system availability. Exploitation requires local access and high privileges; Red Hat assigns a CVSS 3.1 score of 4.4. The upstream issue is fixed in Linux 6.1.76, 6.6.15, 6.7.3, 6.8, and later stable releases. Red Hat has issued fixes for affected Red Hat Enterprise Linux 8, RHEL 9, and RHEL 9.4 Extended Update Support packages, while RHEL 8 and RHEL 9 real-time kernels remain affected; unsupported RHEL 6 and 7 variants should be considered potentially affected. Organizations should update to vendor-supported current kernel releases rather than cherry-picking the individual upstream patch.
Aug 26, 2026
**CVE-2023-3390** is an important-severity use-after-free flaw in the Linux kernel's Netfilter/nftables subsystem. Improper handling of named and anonymous sets in batch requests can allow a local attacker with `CAP_NET_ADMIN` to read and write arbitrary kernel memory, potentially causing denial of service or escalating privileges. Red Hat rates the vulnerability **CVSS 7.8** (`AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`). Unprivileged user namespaces can enable local unprivileged RHEL users to obtain the capability needed for exploitation. Red Hat released fixes for affected RHEL 8 `kernel`, `kernel-rt`, and `kpatch` packages, with updates issued from September 2023 through March 2024. OpenShift control-plane hosts contain the affected component, but Red Hat assesses container exploitation risk as low because OpenShift namespace controls prevent containers from obtaining the required capability.
Aug 26, 2026