kernel: NFSv4.0: Fix a use-after-free problem in the asynchronous open()

A flaw was found in the Linux kernel's Network File System NFS client. When multiple threads concurrently attempt to open files and are aborted before receiving a server response, a race condition can cause the system to reference already freed memory. A local user could exploit this vulnerabilit...

AZL-55594 CVE-2024-53173 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open Yang Erkun reports that when two threads are opening files at the same time, and are forced to abort before a reply is seen, then the call to nfsreleaseseqid in...