Linux Kernel NFS Buffer Overflow Vulnerability in Sysfs Link RPC Client

A buffer overflow vulnerability has been identified in the Linux kernel's NFS implementation. The issue arises in the 'nfs_sysfs_link_rpc_client()' function, where a character array of 64 bytes is used. The size of 'clnt->cl_program->name' is unknown, leading to a potential buffer overflow when 'strcat()' is used. This vulnerability has been addressed by replacing 'strcat()' with safer alternatives, 'strscpy()' and 'strncat()'.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, which may allow for arbitrary code execution or causing a denial-of-service condition.