Linux · Linux Kernel · CVE-2024-50046
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A NULL-pointer dereference issue was found in the Linux kernel's NFSv4 implementation, specifically in the `nfs42 complete copies()` function. This issue can occur when files are copied from one location to another on the same NFS server, resulting in a kernel crash. The error is indicated by a syslog message showing a state recovery failure for an open file, followed by a memory abort and an internal error.
Recommendations:
To resolve this issue, update the Linux kernel to version 6.6.58 or later. As a temporary workaround, consider disabling the `nfs42 complete copies()` function until a patch is available. However, this may have unintended consequences and should be approached with caution.