CVE-2024-49875: nfsd: map the EBADMSG to nfserr_io to avoid warning

Q: What is the severity of CVE-2024-49875?

CVE-2024-49875 is classified as a moderate severity vulnerability affecting the Linux kernel's nfsd subsystem.

Q: How do I fix CVE-2024-49875?

To address CVE-2024-49875, upgrade to the latest version of the Linux kernel or to specific patched versions as outlined in the advisory.

Q: Which versions of the Linux kernel are affected by CVE-2024-49875?

CVE-2024-49875 impacts Linux kernel versions prior to 5.10.227 and between 5.11 and 6.11.3.

Q: What does CVE-2024-49875 involve?

CVE-2024-49875 addresses a warning caused by the EBADMSG error that occurs in ext4 during a checksum failure.

Q: Are there any specific distributions affected by CVE-2024-49875?

Yes, Debian-based distributions with Linux kernel versions listed in the vulnerability details are affected by CVE-2024-49875.

Published Oct 21, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

nfsd: map the EBADMSG to nfserrio to avoid warning

Ext4 will throw -EBADMSG through ext4readdir when a checksum error occurs, resulting in the following WARNING.

Fix it by mapping EBADMSG to nfserrio.

nfsdbufferedreaddir iteratedir // -EBADMSG -74 ext4readdir // .iterateshared ext4dxreaddir ext4htreefilltree htreedirblocktotree ext4readdirblock ext4readdirblock ext4dirblockcsumverify warnnospaceforcsum warnnospaceforcsum return ERRPTR(-EFSBADCRC) // -EBADMSG -74 nfserrno // WARNING

[ 161.115610] ------------[ cut here ]------------ [ 161.116465] nfsd: non-standard errno: -74 [ 161.117315] WARNING: CPU: 1 PID: 780 at fs/nfsd/nfsproc.c:878 nfserrno+0x9d/0xd0 [ 161.118596] Modules linked in: [ 161.119243] CPU: 1 PID: 780 Comm: nfsd Not tainted 5.10.0-00014-g79679361fd5d #138 [ 161.120684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qe mu.org 04/01/2014 [ 161.123601] RIP: 0010:nfserrno+0x9d/0xd0 [ 161.124676] Code: 0f 87 da 30 dd 00 83 e3 01 b8 00 00 00 05 75 d7 44 89 ee 48 c7 c7 c0 57 24 98 89 44 24 04 c6 05 ce 2b 61 03 01 e8 99 20 d8 00 <0f> 0b 8b 44 24 04 eb b5 4c 89 e6 48 c7 c7 a0 6d a4 99 e8 cc 15 33 [ 161.127797] RSP: 0018:ffffc90000e2f9c0 EFLAGS: 00010286 [ 161.128794] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 161.130089] RDX: 1ffff1103ee16f6d RSI: 0000000000000008 RDI: fffff520001c5f2a [ 161.131379] RBP: 0000000000000022 R08: 0000000000000001 R09: ffff8881f70c1827 [ 161.132664] R10: ffffed103ee18304 R11: 0000000000000001 R12: 0000000000000021 [ 161.133949] R13: 00000000ffffffb6 R14: ffff8881317c0000 R15: ffffc90000e2fbd8 [ 161.135244] FS: 0000000000000000(0000) GS:ffff8881f7080000(0000) knlGS:0000000000000000 [ 161.136695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.137761] CR2: 00007fcaad70b348 CR3: 0000000144256006 CR4: 0000000000770ee0 [ 161.139041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.140291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.141519] PKRU: 55555554 [ 161.142076] Call Trace: [ 161.142575] ? warn+0x9b/0x140 [ 161.143229] ? nfserrno+0x9d/0xd0 [ 161.143872] ? reportbug+0x125/0x150 [ 161.144595] ? handlebug+0x41/0x90 [ 161.145284] ? excinvalidop+0x14/0x70 [ 161.146009] ? asmexcinvalidop+0x12/0x20 [ 161.146816] ? nfserrno+0x9d/0xd0 [ 161.147487] nfsdbufferedreaddir+0x28b/0x2b0 [ 161.148333] ? nfsd4encodedirentfattr+0x380/0x380 [ 161.149258] ? nfsdbufferedfilldir+0xf0/0xf0 [ 161.150093] ? waitforconcurrentwrites+0x170/0x170 [ 161.151004] ? genericfilellseeksize+0x48/0x160 [ 161.151895] nfsdreaddir+0x132/0x190 [ 161.152606] ? nfsd4encodedirentfattr+0x380/0x380 [ 161.153516] ? nfsdunlink+0x380/0x380 [ 161.154256] ? overridecreds+0x45/0x60 [ 161.155006] nfsd4encodereaddir+0x21a/0x3d0 [ 161.155850] ? nfsd4encodereadlink+0x210/0x210 [ 161.156731] ? writebytestoxdrbuf+0x97/0xe0 [ 161.157598] ? writebytestoxdrbuf+0xd0/0xd0 [ 161.158494] ? lockdowngrade+0x90/0x90 [ 161.159232] ? nfs4svcdecodevoidarg+0x10/0x10 [ 161.160092] nfsd4encodeoperation+0x15a/0x440 [ 161.160959] nfsd4proccompound+0x718/0xe90 [ 161.161818] nfsddispatch+0x18e/0x2c0 [ 161.162586] svcprocesscommon+0x786/0xc50 [ 161.163403] ? nfsdsvc+0x380/0x380 [ 161.164137] ? svcprintk+0x160/0x160 [ 161.164846] ? svcxprtdoenqueue.part.0+0x365/0x380 [ 161.165808] ? nfsdsvc+0x380/0x380 [ 161.166523] ? rcuiswatching+0x23/0x40 [ 161.167309] svcprocess+0x1a5/0x200 [ 161.168019] nfsd+0x1f5/0x380 [ 161.168663] ? nfsdshutdownthreads+0x260/0x260 [ 161.169554] kthread+0x1c4/0x210 [ 161.170224] ? kthreadinsertworksanitycheck+0x80/0x80 [ 161.171246] retfromfork+0x1f/0x30

Other sources

In the Linux kernel, the following vulnerability has been resolved:

nfsd: map the EBADMSG to nfserrio to avoid warning

Ext4 will throw -EBADMSG through ext4readdir when a checksum error occurs, resulting in the following WARNING.

Fix it by mapping EBADMSG to nfserrio.

— NVD

This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.

— Launchpad

Affected Software

8 affected componentsFixes available

Linux Linux kernel<5.10.227

Linux Linux kernel>=5.11<5.15.168

Linux Linux kernel>=5.16<6.1.113

Linux Linux kernel>=6.2<6.6.55

Linux Linux kernel>=6.7<6.10.14

Linux Linux kernel>=6.11<6.11.3

debian/linux<=5.10.223-1

5.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

debian/linux-6.1

6.1.129-1~deb11u1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Upgrade
Upgrade debian/linux-6.1 to a version that resolves this vulnerability.
Fixed in 6.1.129-1~deb11u1

Event History

Oct 21, 2024

CVE Published

via MITRE·06:01 PM

Data Sourced

via MITRE·06:01 PM

DescriptionSeverity

Data Sourced

via NVD·06:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via Red Hat·07:01 PM

DescriptionSeverityAffected Software

Feb 12, 2025

Data Sourced

via Launchpad·05:17 AM

Description

May 3, 2025

Data Sourced

via Ubuntu·06:25 AM

RemedyDescriptionSeverityAffected Software

Jan 7, 58561

Event

via MITRE·01:58 AM

Frequently Asked Questions

What is the severity of CVE-2024-49875?

CVE-2024-49875 is classified as a moderate severity vulnerability affecting the Linux kernel's nfsd subsystem.

How do I fix CVE-2024-49875?

To address CVE-2024-49875, upgrade to the latest version of the Linux kernel or to specific patched versions as outlined in the advisory.

Which versions of the Linux kernel are affected by CVE-2024-49875?

CVE-2024-49875 impacts Linux kernel versions prior to 5.10.227 and between 5.11 and 6.11.3.

What does CVE-2024-49875 involve?

CVE-2024-49875 addresses a warning caused by the EBADMSG error that occurs in ext4 during a checksum failure.

Are there any specific distributions affected by CVE-2024-49875?

Yes, Debian-based distributions with Linux kernel versions listed in the vulnerability details are affected by CVE-2024-49875.

CVE-2024-49875: nfsd: map the EBADMSG to nfserr_io to avoid warning

Other sources

Affected Software

Remediation

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-49875?

How do I fix CVE-2024-49875?

Which versions of the Linux kernel are affected by CVE-2024-49875?

What does CVE-2024-49875 involve?

Are there any specific distributions affected by CVE-2024-49875?

Company

Resources

Contact