CVE-2024-35914: nfsd: Fix error cleanup path in nfsd_rename()
In the Linux kernel, the following vulnerability has been resolved:
nfsd: Fix error cleanup path in nfsdrename()
Commit a8b0026847b8 ("rename(): avoid a deadlock in the case of parents having no common ancestor") added an error bail out path. However this path does not drop the remount protection that has been acquired. Fix the cleanup path to properly drop the remount protection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch a8b0026847b8 - Compensating control
If running a vulnerable kernel where the nfsd_rename() error cleanup path does not properly drop the remount protection, apply the commit a8b0026847b8 ("nfsd: Fix error cleanup path in nfsd_rename()") to ensure the cleanup path properly drops the remount protection acquired during rename processing.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35914?
CVE-2024-35914 is considered to have a moderate severity level due to its potential to cause deadlocks in the Linux kernel's NFS server.
How do I fix CVE-2024-35914?
To fix CVE-2024-35914, update to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are affected by CVE-2024-35914?
CVE-2024-35914 affects specific versions of the Linux kernel including 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, and 6.12.12-1.
What is the impact of CVE-2024-35914?
The impact of CVE-2024-35914 can lead to deadlocks in the NFS server during rename operations, potentially affecting system stability.
When was CVE-2024-35914 published?
CVE-2024-35914 was published in 2024 following the identification and resolution of the vulnerability in the Linux kernel.