Linux Kernel NFS Server Page Replacement Vulnerability in Splice Read Operations

A vulnerability in the Linux kernel's NFS server implementation can lead to memory corruption during splice read operations. The issue arises when a partial page is read and subsequently added to the request's page array. If this process is repeated, it can cause the array to overrun, corrupting important pointers and trailing fields. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to memory corruption, allowing for potential arbitrary code execution or causing a denial-of-service condition by crashing the NFS server.