CVE-2024-35914CWE-667

CVE-2024-35914

High · published May 19, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nfsd: Fix error cleanup path in nfsd_rename()

Commit a8b0026847b8 ("rename(): avoid a deadlock in the case of parents

having no common ancestor") added an error bail out path. However this

path does not drop the remount protection that has been acquired. Fix

the cleanup path to properly drop the remount protection.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-05-19T13:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.8.56.8.5
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 19 MAY 08:35Z
    nfsd: Fix error cleanup path in nfsd_rename()
    cvelistv5