- Vulnerability/
- CVE-2024-43826
CVE-2024-43826: nfs: pass explicit offset/count to trace events
First published: Sat Aug 17 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfs_folio_length is unsafe to use without having the folio locked and a check for a NULL ->f_mapping that protects against truncations and can lead to kernel crashes. E.g. when running xfstests generic/065 with all nfs trace points enabled. Follow the model of the XFS trace points and pass in an explіcit offset and length. This has the additional benefit that these values can be more accurate as some of the users touch partial folio ranges.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 6.12.5-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/387e6e9d110250946df4d4ebef9c2def5c7a4722
- https://git.kernel.org/stable/c/fada32ed6dbc748f447c8d050a961b75d946055a
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43826
- https://nvd.nist.gov/vuln/detail/CVE-2024-43826
- https://launchpad.net/bugs/cve/CVE-2024-43826
- https://security-tracker.debian.org/tracker/CVE-2024-43826
- https://ubuntu.com/security/CVE-2024-43826
- https://git.kernel.org/linus/fada32ed6dbc748f447c8d050a961b75d946055a
- agent/title
- agent/severity
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- agent/author
- agent/references
- collector/usn-cve
- source/Ubuntu
- agent/description
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- package-manager/debian