CVE-2024-35914

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35914
In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix error cleanup path in nfsd_rename() Commit a8b0026847b8 ("rename(): avoid a deadlock in the case of parents having no common ancestor") added an error bail out path. However this path does not drop the remount protection that has been acquired. Fix the cleanup path to properly drop the remount protection.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd Patch
https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56 Patch
https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd Patch
https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
History

23 Sep 2025, 15:14

Type Values Removed Values Added
CWE CWE-667
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd - () https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd - Patch
References () https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56 - () https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56 - Patch

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd - () https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd -
References () https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56 - () https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nfsd: corrigió la ruta de limpieza de errores en nfsd_rename() Confirme a8b0026847b8 ("rename(): evite un punto muerto en el caso de que los padres no tengan un ancestro común") agregó una ruta de rescate de errores . Sin embargo, este camino no elimina la protección de remontaje adquirida. Corrija la ruta de limpieza para eliminar correctamente la protección de remontaje.

20 May 2024, 13:00

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-19 09:15

Updated : 2025-09-23 15:14

NVD link : CVE-2024-35914

Mitre link : CVE-2024-35914

CVE.ORG link : CVE-2024-35914

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking