CVE-2024-57927
published 2025-01-19CVE-2024-57927: In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib wants to copy…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.17%
6.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
nfs: Fix oops in nfs_netfs_init_request() when copying to cache
When netfslib wants to copy some data that has just been read on behalf of
nfs, it creates a new write request and calls nfs_netfs_init_request() to
initialise it, but with a NULL file pointer. This causes
nfs_file_open_context() to oops - however, we don't actually need the nfs
context as we're only going to write to the cache.
Fix this by just returning if we aren't given a file pointer and emit a
warning if the request was for something other than copy-to-cache.
Further, fix nfs_netfs_free_request() so that it doesn't try to free the
context if the pointer is NULL.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.12.10-1 (forky) | linux 6.12.10-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e < 13a07cc81e2d116cece727a83746c74b87a9d417 | 13a07cc81e2d116cece727a83746c74b87a9d417 |
| linux | linux | >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e < 86ad1a58f6a9453f49e06ef957a40a8dac00a13f | 86ad1a58f6a9453f49e06ef957a40a8dac00a13f |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.12.10-1 | 6.12.10-1 |
| linux | linux_kernel | >= 0 < 6.12.10-1 | 6.12.10-1 |
| linux | linux_kernel | >= 6.12 < 6.12.10 | 6.12.10 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: nfs: Fix oops in nfs_netfs_init_request() when copying to cache
vendor_redhat·2025-01-19·CVSS 5.5
CVE-2024-57927 [MEDIUM] CWE-476 kernel: nfs: Fix oops in nfs_netfs_init_request() when copying to cache
kernel: nfs: Fix oops in nfs_netfs_init_request() when copying to cache
In the Linux kernel, the following vulnerability has been resolved:
nfs: Fix oops in nfs_netfs_init_request() when copying to cache
When netfslib wants to copy some data that has just been read on behalf of
nfs, it creates a new write request and calls nfs_netfs_init_request() to
initialise it, but with a NULL file pointer. This causes
nfs_file_open_context() to oops - however, we don't actually need the nfs
context as we're only going to write to the cache.
Fix this by just returning if we aren't given a file pointer and emit a
warning if the request was for something other than copy-to-cache.
Further, fix nfs_netfs_free_request() so that it doesn't try to free the
context if the pointer is NULL.
Package: kernel (Re
Debian
CVE-2024-57927: linux - In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oo...
vendor_debian·2024·CVSS 5.5
CVE-2024-57927 [MEDIUM] CVE-2024-57927: linux - In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oo...
In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib wants to copy some data that has just been read on behalf of nfs, it creates a new write request and calls nfs_netfs_init_request() to initialise it, but with a NULL file pointer. This causes nfs_file_open_context() to oops - however, we don't actually need the nfs context as we're only going to write to the cache. Fix this by just returning if we aren't given a file pointer and emit a warning if the request was for something other than copy-to-cache. Further, fix nfs_netfs_free_request() so that it doesn't try to free the context if the pointer is NULL.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.12.10-1)
sid:
OSV
CVE-2024-57927: In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib want
osv·2025-01-19·CVSS 5.5
CVE-2024-57927 [MEDIUM] CVE-2024-57927: In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib want
In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib wants to copy some data that has just been read on behalf of nfs, it creates a new write request and calls nfs_netfs_init_request() to initialise it, but with a NULL file pointer. This causes nfs_file_open_context() to oops - however, we don't actually need the nfs context as we're only going to write to the cache. Fix this by just returning if we aren't given a file pointer and emit a warning if the request was for something other than copy-to-cache. Further, fix nfs_netfs_free_request() so that it doesn't try to free the context if the pointer is NULL.
GHSA
GHSA-j58h-ppm8-rm4x: In the Linux kernel, the following vulnerability has been resolved:
nfs: Fix oops in nfs_netfs_init_request() when copying to cache
When netfslib wa
ghsa_unreviewed·2025-01-19
CVE-2024-57927 [MEDIUM] CWE-476 GHSA-j58h-ppm8-rm4x: In the Linux kernel, the following vulnerability has been resolved:
nfs: Fix oops in nfs_netfs_init_request() when copying to cache
When netfslib wa
In the Linux kernel, the following vulnerability has been resolved:
nfs: Fix oops in nfs_netfs_init_request() when copying to cache
When netfslib wants to copy some data that has just been read on behalf of
nfs, it creates a new write request and calls nfs_netfs_init_request() to
initialise it, but with a NULL file pointer. This causes
nfs_file_open_context() to oops - however, we don't actually need the nfs
context as we're only going to write to the cache.
Fix this by just returning if we aren't given a file pointer and emit a
warning if the request was for something other than copy-to-cache.
Further, fix nfs_netfs_free_request() so that it doesn't try to free the
context if the pointer is NULL.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-01-19
Published