Riskcovery

CVE-2024-43826

nfs: pass explicit offset/count to trace events

State
Published
Severity
Not scored
Published
Aug 17, 2024
Updated
May 11, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nfs: pass explicit offset/count to trace events

nfs_folio_length is unsafe to use without having the folio locked and a check for a NULL ->f_mapping that protects against truncations and can lead to kernel crashes. E.g. when running xfstests generic/065 with all nfs trace points enabled.

Follow the model of the XFS trace points and pass in an explіcit offset and length. This has the additional benefit that these values can be more accurate as some of the users touch partial folio ranges.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • eb5654b3b89d5e836312cea9f3fdb49457852e89 to before 1562138b9cababf637eee485e98491f9206a990dAffected
  • eb5654b3b89d5e836312cea9f3fdb49457852e89 to before 387e6e9d110250946df4d4ebef9c2def5c7a4722Affected
  • eb5654b3b89d5e836312cea9f3fdb49457852e89 to before fada32ed6dbc748f447c8d050a961b75d946055aAffected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.130 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.