CVE-2024-53073

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53073
In the Linux kernel, the following vulnerability has been resolved: NFSD: Never decrement pending_async_copies on error The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn->pending_async_copies.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1421883aa30c5d26bc3370e2d19cb350f0d5ca28 Patch
https://git.kernel.org/stable/c/8286f8b622990194207df9ab852e0f87c60d35e9 Patch
https://git.kernel.org/stable/c/9467c49437e948c541569007cd412d577942e635
https://git.kernel.org/stable/c/949ee5d44d1fd95119b29b3382a933cdc617bf9e
https://git.kernel.org/stable/c/ed98d26021db0fe62c327aa9f5e57a90bff3fa94
https://git.kernel.org/stable/c/fb79d68a36e21960341ccab07d1ac06d93830321
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Dec 2024, 21:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/9467c49437e948c541569007cd412d577942e635 -
  • () https://git.kernel.org/stable/c/ed98d26021db0fe62c327aa9f5e57a90bff3fa94 -

02 Dec 2024, 08:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/949ee5d44d1fd95119b29b3382a933cdc617bf9e -
  • () https://git.kernel.org/stable/c/fb79d68a36e21960341ccab07d1ac06d93830321 -

25 Nov 2024, 20:43

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFSD: Nunca decremente pending_async_copies en caso de error El flujo de error en nfsd4_copy() llama a cleanup_async_copy(), que ya decrementa nn->pending_async_copies.
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/1421883aa30c5d26bc3370e2d19cb350f0d5ca28 - () https://git.kernel.org/stable/c/1421883aa30c5d26bc3370e2d19cb350f0d5ca28 - Patch
References () https://git.kernel.org/stable/c/8286f8b622990194207df9ab852e0f87c60d35e9 - () https://git.kernel.org/stable/c/8286f8b622990194207df9ab852e0f87c60d35e9 - Patch

19 Nov 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-19 18:15

Updated : 2024-12-14 21:15

NVD link : CVE-2024-53073

Mitre link : CVE-2024-53073

CVE.ORG link : CVE-2024-53073

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo