CVE-2024-42078: nfsd: initialise nfsd_info.mutex early.
In the Linux kernel, the following vulnerability has been resolved:
nfsd: initialise nfsdinfo.mutex early.
nfsdinfo.mutex can be dereferenced by svcpoolstatsstart() immediately after the new netns is created. Currently this can trigger an oops.
Move the initialisation earlier before it can possibly be dereferenced.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42078?
CVE-2024-42078 has a severity rating that indicates a potential risk of system instability due to an oops triggering in the Linux kernel.
How do I fix CVE-2024-42078?
To fix CVE-2024-42078, update the Linux kernel to version 6.9.8 or later for Red Hat or to version 5.10.223-1, 5.10.226-1, 6.1.119-1, or later for Debian.
Which Linux kernel versions are affected by CVE-2024-42078?
CVE-2024-42078 affects Linux kernel versions up to 6.8 and between 6.9 and 6.9.8.
What components are impacted by CVE-2024-42078?
The vulnerability impacts the nfsd_info structure and its mutex handling within the Linux kernel.
Is CVE-2024-42078 related to network namespace creation?
Yes, CVE-2024-42078 is related to issues occurring during the creation of new network namespaces.