CVE-2024-58092

MEDIUM5.5

nfsd: fix legacy client tracking initialization

Published Apr 16, 2025

Modified 11 months ago

Details

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix legacy client tracking initialization

Get rid of the nfsd4_legacy_tracking_ops->init() call in check_for_legacy_methods(). That will be handled in the caller (nfsd4_client_tracking_init()). Otherwise, we'll wind up calling nfsd4_legacy_tracking_ops->init() twice, and the second time we'll trigger the BUG_ON() in nfsd4_init_recdir().

References

WEB

https://git.kernel.org/stable/c/95407304253a4bf03494d921c6913e220c26cc63

WEB

https://git.kernel.org/stable/c/cdd66082b227eb695cbf54b7c121ea032e869981

WEB

https://git.kernel.org/stable/c/de71d4e211eddb670b285a0ea477a299601ce1ca

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-58092

CVSS Analysis

CVSS v3.1

5.5