CVE-2024-43826: nfs: pass explicit offset/count to trace events
In the Linux kernel, the following vulnerability has been resolved:
nfs: pass explicit offset/count to trace events
nfsfoliolength is unsafe to use without having the folio locked and a check for a NULL ->fmapping that protects against truncations and can lead to kernel crashes. E.g. when running xfstests generic/065 with all nfs trace points enabled.
Follow the model of the XFS trace points and pass in an explіcit offset and length. This has the additional benefit that these values can be more accurate as some of the users touch partial folio ranges.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43826?
The severity of CVE-2024-43826 is categorized as high due to its potential to cause kernel crashes.
How do I fix CVE-2024-43826?
To fix CVE-2024-43826, update your Linux kernel to one of the patched versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
Which systems are affected by CVE-2024-43826?
CVE-2024-43826 affects various Debian-based systems running vulnerable versions of the Linux kernel.
What does CVE-2024-43826 impact?
CVE-2024-43826 impacts NFS by causing unsafe behavior in nfs_folio_length when certain checks are not in place.
Is CVE-2024-43826 related to data security?
Yes, CVE-2024-43826 can lead to security issues by causing kernel crashes which may expose data or system stability risks.