PT-2024-33955 · Linux+8 · Linux Kernel+8
Published
2024-10-21
·
Updated
2025-10-03
·
CVE-2024-50121
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
The issue arises when the
nfsd client shrinker is running concurrently with the nfs4 state shutdown net function, leading to potential use-after-free errors. This occurs because the expire client function unhashes and then destroys a client, while the nfs4 state destroy net function releases resources without waiting for the shrinker to exit. Technical details include the involvement of nfsd file cache shutdown, kmem cache destroy, and the nfsd file slab and nfsd file mark slab caches. The nfs4 state shutdown net function is critical in this process, as it is responsible for shutting down the NFS server.Recommendations:
To resolve this issue, update the Linux kernel to version 6.6.61 or later. As a temporary workaround, consider disabling the
nfsd shrinker work function until a patch is available. Restrict access to the vulnerable nfsd module to minimize the risk of exploitation. Avoid using the nfsd client shrinker concurrently with the nfs4 state shutdown net function until the issue is resolved.Exploit
Fix
Use After Free
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu