CVE-2022-26495: Debian Linux

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Network Block Device Project Network Block Device: before 3.24 (fixed in 3.24)

Published 2022-03-06. Last modified 2026-06-17.