Executive Summary

This vulnerability involves the Linux kernel's NFS implementation where the TLS certificate fields were not properly checked in the nfs_match_client() function. Specifically, when the TLS security policy is of type RPC_XPRTSEC_TLS_X509, the cert_serial and privkey_serial fields, which define the client's identity to the server, need to match. The vulnerability was that this check was missing or insufficient, potentially allowing identity mismatches.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to impersonate a legitimate client by presenting mismatched TLS certificate fields, potentially leading to unauthorized access or man-in-the-middle attacks on NFS communications.

Useful 0 Not Useful 0