CVE-2003-0619: Linux Kernel

Medium severity, CVSS 5.0. EPSS: 10.9% chance of exploitation in the next 30 days.

Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call.

Affected products

• Linux Linux Kernel: up to and including 2.4.21

Published 2003-08-27. Last modified 2026-06-16.