Riskcovery

CVE-2024-58092

nfsd: fix legacy client tracking initialization

State
Published
Severity
Not scored
Published
Apr 16, 2025
Updated
May 11, 2026
Reserved
Mar 6, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix legacy client tracking initialization

Get rid of the nfsd4_legacy_tracking_ops->init() call in check_for_legacy_methods(). That will be handled in the caller (nfsd4_client_tracking_init()). Otherwise, we'll wind up calling nfsd4_legacy_tracking_ops->init() twice, and the second time we'll trigger the BUG_ON() in nfsd4_init_recdir().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 74fd48739d0488e39ae18b0168720f449a06690c to before 95407304253a4bf03494d921c6913e220c26cc63Affected
  • 74fd48739d0488e39ae18b0168720f449a06690c to before cdd66082b227eb695cbf54b7c121ea032e869981Affected
  • 74fd48739d0488e39ae18b0168720f449a06690c to before de71d4e211eddb670b285a0ea477a299601ce1caAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.22 through 6.12.*Not affected
  • 6.13.10 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.