PT-2024-33719 · Nfsd+10 · Nfsd+10

Published

2024-08-17

·

Updated

2025-09-29

·

CVE-2024-49875

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58
Description: The issue arises when Ext4 throws a -EBADMSG error through ext4 readdir due to a checksum error, resulting in a WARNING. This occurs because nfsd does not map EBADMSG to nfserr io. The error is triggered in the nfsd buffered readdir function, specifically when ext4 readdir returns an error. Technical details about the issue include the involvement of nfserrno and the nfsd buffered readdir function.
Recommendations: To resolve the issue, update the Linux kernel to version 6.6.58 or later. As a temporary workaround, consider restricting the use of the nfsd buffered readdir function until a patch is available. Additionally, ensure that any configuration changes related to NFS and Ext4 are reviewed and updated according to the latest recommendations.

Exploit

Fix

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-14046
ALT-PU-2024-14268
ALT-PU-2024-14270
ALT-PU-2024-14503
ALT-PU-2024-15739
ALT-PU-2024-16172
AZL-51207
AZL-51222
BDU:2025-03149
CVE-2024-49875
DLA-4008-1
DLA-4075-1
INFSA-2025_6966
MGASA-2024-0344
MGASA-2024-0345
OESA-2024-2321
OESA-2024-2324
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2024_3984-1
OPENSUSE-SU-2024_3986-1
OPENSUSE-SU-2024_4315-1
OPENSUSE-SU-2024_4376-1
OPENSUSE-SU-2025:14705-1
RHSA-2025:6966
RHSA-2025_6966
SUSE-SU-2024:3984-1
SUSE-SU-2024:3986-1
SUSE-SU-2024:4315-1
SUSE-SU-2024:4318-1
SUSE-SU-2024:4364-1
SUSE-SU-2024:4376-1
SUSE-SU-2024:4387-1
SUSE-SU-2025:20163-1
SUSE-SU-2025:20164-1
SUSE-SU-2025:20246-1
SUSE-SU-2025:20247-1
USN-7166-1
USN-7166-2
USN-7166-3
USN-7166-4
USN-7186-1
USN-7186-2
USN-7194-1
USN-7276-1
USN-7277-1
USN-7301-1
USN-7303-1
USN-7303-2
USN-7303-3
USN-7304-1
USN-7310-1
USN-7311-1
USN-7384-1
USN-7384-2
USN-7385-1
USN-7386-1
USN-7403-1
USN-7468-1

Affected Products

Alt Linux
Astra Linux
Debian
Ext4
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu
Nfsd