PT-2024-32111 · Linux+1 · Linux Kernel+1

Olga Kornievskaia · Published 2024-08-23 · Updated 2025-09-29 · CVE-2024-46682

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's nfsd component, where a panic can occur when handling closed files in nfs4 show open. Prior to a specific commit, the states show function relied on the sc type field being of a valid type before calling a subfunction to show content of a particular stateid. After the commit, the validity of the stateid was split into sc status, and sc type was no longer changed to 0 while unhashing the stateid. This resulted in kernel oopsing for nfsv4.0 opens that stay around, and in nfs4 show open, it would dereference sc file, which was NULL. To reproduce, one can mount the server with 4.0, read and close a file, and then on the server, cat /proc/fs/nfsd/clients/2/states.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-13260

BDU:2025-03758

CVE-2024-46682

Affected Products

Alt Linux

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46682.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-46682 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46682 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-46682 · Vendor Advisory
• https://git.kernel.org/stable/c/a204501e1743d695ca2930ed25a2be9f8ced96d3 · Patch
• https://security-tracker.debian.org/tracker/CVE-2024-46682 · Vendor Advisory
• https://git.kernel.org/stable/c/ba0b697de298285301c71c258598226e06494236 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-46682 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-46682 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-46682 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-46682 · Security Note
• https://bdu.fstec.ru/vul/2025-03758 · Security Note
• https://t.me/cvenotify/94545 · Telegram Post
• https://docs.bell-sw.com/security/cves/CVE-2024-46682 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note