CVE-2024-58092

MEDIUM

Linux Kernel - Denial of Service via Legacy Client Tracking Initialization

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4_legacy_tracking_ops->init() call in check_for_legacy_methods(). That will be handled in the caller (nfsd4_client_tracking_init()). Otherwise, we'll wind up calling nfsd4_legacy_tracking_ops->init() twice, and the second time we'll trigger the BUG_ON() in nfsd4_init_recdir().

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/95407304253a4bf03494d921c6913e220c26cc63

Patch

https://git.kernel.org/stable/c/cdd66082b227eb695cbf54b7c121ea032e869981

Patch

https://git.kernel.org/stable/c/de71d4e211eddb670b285a0ea477a299601ce1ca

Scores

CVSS v3 5.5

EPSS 0.0017

EPSS Percentile 7.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (11)

linux/Kernel 6.13.0 - 6.13.10linux

linux/Kernel 6.8.0 - 6.12.22linux

Linux/Linux < 6.8

Linux/Linux 6.12.22 - 6.12.*

Linux/Linux 6.13.10 - 6.13.*

Linux/Linux 6.14

Linux/Linux 6.8

Linux/Linux 74fd48739d0488e39ae18b0168720f449a06690c - 95407304253a4bf03494d921c6913e220c26cc63

Linux/Linux 74fd48739d0488e39ae18b0168720f449a06690c - cdd66082b227eb695cbf54b7c121ea032e869981

Linux/Linux 74fd48739d0488e39ae18b0168720f449a06690c - de71d4e211eddb670b285a0ea477a299601ce1ca

... and 1 more

Published Apr 16, 2025

Tracked Since Feb 18, 2026