Към съдържанието
Търсене

CVE-2024-50046: Linux

9.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() On the node of an NFS client, some files saved in the mountpoint of the NFS server were copied to another location of the same NFS server. Accidentally, the nfs42_complete_copies() got a NULL-pointer dereference crash with the following syslog: [232064.838881] NFSv4: state recovery failed for open file nfs/pvc-12b5200d-cd0f-46a3-b9f0-af8f4fe0ef64.qcow2, error = -116 [232064.839360] NFSv4: state recovery failed for open file nfs/pvc-12b5200d-cd0f-46a3-b9f0-af8f4fe0ef64.qcow2, error = -116 [232066.588183] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000058 [232066.588586] Mem abort info: [232066.588701] ESR = 0x0000000096000007 [232066.588862] EC = 0x25: DABT (current EL), IL = 32 bits [232066.589084] SET = 0, FnV = 0 [232066.589216] EA = 0, S1PTW = 0 [232066.589340] FSC = 0x07: level 3 translation fault [232066.589559] Data abort info: [232066.589683] ISV = 0, ISS = 0x00000007 [232066.589842] CM = 0, WnR = 0 [232066.589967] user pgtable: 64k pages, 48-bit VAs, pgdp=00002000956ff400 [232066.590231] [0000000000000058] pgd=08001100ae100003, p4d=08001100ae100003, pud=08001100ae100003, pmd=08001100b3c00003, pte=0000000000000000 [232066.590757] Internal error: Oops: 96000007 [#1] SMP [232066.590958] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache netfs ocfs2_dlmfs ocfs2_stack_o2cb ocfs2_dlm vhost_net vhost vhost_iotlb tap tun ipt_rpfilter xt_multiport ip_set_hash_ip ip_set_hash_net xfrm_interface xfrm6_tunnel tunnel4 tunnel6 esp4 ah4 wireguard libcurve25519_generic veth xt_addrtype xt_set nf_conntrack_netlink ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_bitmap_port ip_set_hash_ipport dummy ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs iptable_filter sch_ingress nfnetlink_cttimeout vport_gre ip_gre ip_tunnel gre vport_geneve geneve vport_vxlan vxlan i

Засегнати продукти

  • Linux Linux: 0e65a32c8a569db363048e17a708b1a0913adbef преди f892165c564e3aab272948dbb556cc20e290c55a; 0e65a32c8a569db363048e17a708b1a0913adbef преди 584c019baedddec3fd634053e8fb2d8836108d38; 0e65a32c8a569db363048e17a708b1a0913adbef преди 632344b9efa064ca737bfcdaaaced59fd5f18ae9; 0e65a32c8a569db363048e17a708b1a0913adbef преди fca41e5fa4914d12b2136c25f9dad69520b52683; 0e65a32c8a569db363048e17a708b1a0913adbef преди ef9189bb15dcbe7ed3f3515aaa6fc8bf7483960d; 0e65a32c8a569db363048e17a708b1a0913adbef преди a848c29e3486189aaabd5663bc11aea50c5bd144
  • Linux Linux: 5.5; преди 5.5; 5.10.227 до 5.10.*; 5.15.168 до 5.15.*; 6.1.113 до 6.1.*; 6.6.57 до 6.6.*; 6.11.4 до 6.11.*; от 6.12 нататък
  • Siemens: още 4 продукта, добавени от Siemens

    SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, RUGGEDCOM RST2428P, SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, SCALANCE XCM-/XRM-/XCH-/XRH-300 family

История

  • 21 октомври 2024 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2024-50046: Linux | freedomonline.bg