CVE-2024-58092

Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4_legacy_tracking_ops->init() call in check_for_legacy_methods(). That will be handled in the caller (nfsd4_client_tracking_init()). Otherwise, we'll wind up calling nfsd4_legacy_tracking_ops->init() twice, and the second time we'll trigger the BUG_ON() in nfsd4_init_recdir().

Reserved 2025-03-06 | Published 2025-04-16 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

74fd48739d0488e39ae18b0168720f449a06690c before 95407304253a4bf03494d921c6913e220c26cc63
affected

74fd48739d0488e39ae18b0168720f449a06690c before cdd66082b227eb695cbf54b7c121ea032e869981
affected

74fd48739d0488e39ae18b0168720f449a06690c before de71d4e211eddb670b285a0ea477a299601ce1ca
affected

Default status
affected

6.8
affected

Any version before 6.8
unaffected

6.12.22
unaffected

6.13.10
unaffected

6.14
unaffected

References

git.kernel.org/...c/95407304253a4bf03494d921c6913e220c26cc63

git.kernel.org/...c/cdd66082b227eb695cbf54b7c121ea032e869981

git.kernel.org/...c/de71d4e211eddb670b285a0ea477a299601ce1ca

cve.org (CVE-2024-58092)

nvd.nist.gov (CVE-2024-58092)

Download JSON