Riskcovery

CVE-2024-50241

NFSD: Initialize struct nfsd4_copy earlier

State
Published
Severity
7.5 High
Published
Nov 9, 2024
Updated
Aug 5, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Initialize struct nfsd4_copy earlier

Ensure the refcount and async_copies fields are initialized early. cleanup_async_copy() will reference these fields if an error occurs in nfsd4_copy(). If they are not correctly initialized, at the very least, a refcount underflow occurs.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9e52ff544e0bfa09ee339fd7b0937ee3c080c24e to before 059434d23c4578d9d02efb92d848ea21bc640112Affected
  • 43e46ee5efc03990b223f7aa8b77aa9c3d3acfdf to before 7267625baf365a969f1b25ded6f07b64bc90ec5bAffected
  • 7ea9260874b779637aff6d24c344b8ef4ac862a0 to before c3074003fa6837c2b89a34d8d12d9463b59d22d6Affected
  • ae267989b7b7933dfedcd26468d0a88fc3a9da9e to before 421f1a2a1afb47d88de09457ef7687e1df7bc997Affected
  • 6a488ad7745b8f64625c6d3a24ce7e448e83f11b to before e30a9a2f69c34a00a3cb4fd45c5d231929e66fb1Affected
  • aadc3bbea163b6caaaebfdd2b6c4667fbc726752 to before 63fab04cbd0f96191b6e5beedc3b643b01c15889Affected
  • b4e21431a0db4854b5023cd5af001be557e6c3dbAffected
  • 6.10.14 to before 6.11Affected
LinuxLinux
  • 6.11.3 to before 6.11.7Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.