PT-2024-32744 · Linux+8 · Linux Kernel+8
Li Lingfeng
·
Published
2024-09-03
·
Updated
2025-09-29
·
CVE-2024-47692
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
A vulnerability in the Linux kernel has been resolved, specifically in the nfsd component. When a corrupted main.sqlite file is present in /var/lib/nfs/nfsdcld/, it may result in a null pointer dereference in the nfs4 client to reclaim() function. This occurs because memdup user() returns ZERO SIZE PTR when namelen is 0. The issue can be triggered when accessing the name.data assigned the value of ZERO SIZE PTR.
Technical details about exploitation include:
- The
nfs4 client to reclaim()function is vulnerable to null pointer dereference. - The
memdup user()function returns ZERO SIZE PTR whennamelenis 0. - The issue is triggered when accessing
name.dataassigned the value of ZERO SIZE PTR.
Recommendations
To resolve the issue, update the Linux kernel to version 6.6.58 or later.
As a temporary workaround, consider checking
namelen to prevent null pointer dereference in the nfs4 client to reclaim() function.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu