CVE-2024-50043 nfsd: fix possible badness in FREE_STATEID

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREESTATEID When multiple FREESTATEIDs are sent for the same delegation stateid, it can lead to a possible either use-after-free or counter refcount underflow errors. In nfsd4freestateid under the...

CVE-2024-50043

CVE-2024-50043 affects the Linux kernel nfsd component (nfsd4_free_stateid). The issue arises when multiple FREE_STATEIDs are sent for the same delegation stateid; releasing under a dropped client lock allows a subsequent FREE_STATE to reuse the stateid, leading to use-after-free or counter under...

CVE-2024-50043: Use After Free

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREESTATEID When multiple FREESTATEIDs are sent for the same delegation stateid, it can lead to a possible either use-after-free or counter refcount underflow errors. In nfsd4freestateid under the...

PT-2024-33884

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises when multiple FREE STATEIDs are sent for the same delegation stateid, potentially leading to use-after-free or counter refcount underflow errors. This occurs because t...