Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42078
HistoryJul 29, 2024 - 3:52 p.m.

CVE-2024-42078 nfsd: initialise nfsd_info.mutex early.

2024-07-2915:52:40
Linux
github.com
2
linux kernel
nfsd
vulnerability

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

nfsd: initialise nfsd_info.mutex early.

nfsd_info.mutex can be dereferenced by svc_pool_stats_start()
immediately after the new netns is created. Currently this can
trigger an oops.

Move the initialisation earlier before it can possibly be dereferenced.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial