PT-2025-16577 · Linux+4 · Linux Kernel+4

Publicado

2025-01-06

·

Atualizado

2026-04-20

·

CVE-2024-58092

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the initialization of legacy client tracking in the Linux kernel's nfsd component. The problem arises from the duplicate call to nfsd4 legacy tracking ops->init(), which triggers a BUG ON() condition in nfsd4 init recdir(). This has been resolved by removing the unnecessary call to nfsd4 legacy tracking ops->init() in check for legacy methods(), allowing the initialization to be handled by the caller nfsd4 client tracking init().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-665

Identificadores relacionados

BDU:2025-12250
CVE-2024-58092
USN-7605-1
USN-7605-2
USN-7606-1
USN-7628-1
USN-7835-1
USN-7835-2
USN-7835-3
USN-7835-4
USN-7835-5
USN-7835-6
USN-7887-1
USN-7887-2
USN-7940-1
USN-7940-2

Produtos afetados

Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu