What is the severity of CVE-2024-46696?

CVE-2024-46696 has not yet been assigned a specific severity rating but is related to a potential use-after-free vulnerability in the Linux kernel.

How do I fix CVE-2024-46696?

To address CVE-2024-46696, upgrade your Linux kernel to a version that includes the patch for this vulnerability.

Which versions of the Linux kernel are affected by CVE-2024-46696?

CVE-2024-46696 affects Linux kernel versions from 6.9 to 6.10.8 and version 6.11-rc1 through 6.11-rc5.

What does CVE-2024-46696 impact in Linux systems?

CVE-2024-46696 impacts the nfsd component of the Linux kernel, posing a risk related to delegations and memory management.

Is CVE-2024-46696 being actively exploited?

As of now, there is no public information indicating that CVE-2024-46696 is actively being exploited in the wild.

Vulnerability/
CVE-2024-46696

high

7.8

CWE

416

13/9/2024

19/12/2024

CVE-2024-46696: nfsd: fix potential UAF in nfsd4_cb_getattr_release

First published: Fri Sep 13 2024(Updated: )

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last.

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected Software	Affected Version	How to fix
Linux Kernel	>=6.9<6.10.8
Linux Kernel	=6.11-rc1
Linux Kernel	=6.11-rc2
Linux Kernel	=6.11-rc3
Linux Kernel	=6.11-rc4
Linux Kernel	=6.11-rc5

Remedy

https://git.kernel.org/stable/c/1116e0e372eb16dd907ec571ce5d4af325c55c10

Remedy

https://git.kernel.org/stable/c/e0b66698a5ae41078f7490e8b3527013f5fccd6c

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-46696?
CVE-2024-46696 has not yet been assigned a specific severity rating but is related to a potential use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2024-46696?
To address CVE-2024-46696, upgrade your Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-46696?
CVE-2024-46696 affects Linux kernel versions from 6.9 to 6.10.8 and version 6.11-rc1 through 6.11-rc5.
What does CVE-2024-46696 impact in Linux systems?
CVE-2024-46696 impacts the nfsd component of the Linux kernel, posing a risk related to delegations and memory management.
Is CVE-2024-46696 being actively exploited?
As of now, there is no public information indicating that CVE-2024-46696 is actively being exploited in the wild.

agent/references
agent/title
agent/type
agent/description
agent/first-publish-date
agent/author
agent/event
agent/remedy
agent/severity
agent/weakness
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/softwarecombine
vendor/linux
canonical/linux kernel
version/linux kernel/6.9
version/linux kernel/6.11-rc1
version/linux kernel/6.11-rc2
version/linux kernel/6.11-rc3
version/linux kernel/6.11-rc4
version/linux kernel/6.11-rc5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2024-46696?
CVE-2024-46696 has not yet been assigned a specific severity rating but is related to a potential use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2024-46696?
To address CVE-2024-46696, upgrade your Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-46696?
CVE-2024-46696 affects Linux kernel versions from 6.9 to 6.10.8 and version 6.11-rc1 through 6.11-rc5.
What does CVE-2024-46696 impact in Linux systems?
CVE-2024-46696 impacts the nfsd component of the Linux kernel, posing a risk related to delegations and memory management.
Is CVE-2024-46696 being actively exploited?
As of now, there is no public information indicating that CVE-2024-46696 is actively being exploited in the wild.