CVE-2024-47737: nfsd: call cache_put if xdr_reserve_space returns NULL
In the Linux kernel, the following vulnerability has been resolved:
nfsd: call cacheput if xdrreservespace returns NULL
If not enough buffer space available, but idmaplookup has triggered lookupfn which calls cacheget and returns successfully. Then we missed to call cacheput here which pairs with cacheget.
Reviwed-by: Jeff Layton <jlayton@kernel.org>
Other sources
In the Linux kernel, the following vulnerability has been resolved:
nfsd: call cacheput if xdrreservespace returns NULL
If not enough buffer space available, but idmaplookup has triggered lookupfn which calls cacheget and returns successfully. Then we missed to call cacheput here which pairs with cacheget.
Reviwed-by: Jeff Layton <jlayton>
— Red Hat
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47737?
CVE-2024-47737 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-47737?
To fix CVE-2024-47737, update the Linux kernel to one of the patched versions listed in the vulnerability report.
Which versions of the Linux kernel are affected by CVE-2024-47737?
CVE-2024-47737 affects Linux kernel versions up to and including 5.10.226, as well as various versions up to 6.1.113.
What is the impact of CVE-2024-47737 on the Linux system?
The impact of CVE-2024-47737 could potentially lead to resource leaks affecting the stability of the Linux system.
Has CVE-2024-47737 been resolved?
Yes, CVE-2024-47737 has been resolved in newer versions of the Linux kernel.