PT-2024-8998 · Linux+9 · Linux Kernel+9
Syzkaller
·
Published
2024-05-30
·
Updated
2025-09-29
·
CVE-2024-36939
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.37
Description:
The issue is related to the Linux kernel's handling of errors in the
rpc proc register() function, which is called during the initialization of the NFS (Network File System) subsystem. When this function fails, the error is ignored, and the nfs net init() function may still succeed, leading to a potential issue when the nfs net exit() function is called during the destruction of network namespaces. This can cause a warning to be triggered due to an attempt to remove a non-existing proc directory entry. The problem has been made more visible by a recent commit that converted the procfs to per-netns.Recommendations:
To resolve this issue, update the Linux kernel to version 6.6.37 or later. This update includes the necessary fix to properly handle the error of
rpc proc register() in nfs net init().Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu