PT-2025-16577 · Linux+4 · Linux Kernel+4

Published

2025-01-06

·

Updated

2026-04-20

·

CVE-2024-58092

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the initialization of legacy client tracking in the Linux kernel's nfsd component. The problem arises from the duplicate call to nfsd4 legacy tracking ops->init(), which triggers a BUG ON() condition in nfsd4 init recdir(). This has been resolved by removing the unnecessary call to nfsd4 legacy tracking ops->init() in check for legacy methods(), allowing the initialization to be handled by the caller nfsd4 client tracking init().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2025-12250
CVE-2024-58092
USN-7605-1
USN-7605-2
USN-7606-1
USN-7628-1
USN-7835-1
USN-7835-2
USN-7835-3
USN-7835-4
USN-7835-5
USN-7835-6
USN-7887-1
USN-7887-2
USN-7940-1
USN-7940-2

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu