CVE-2024-42078

nfsd: initialise nfsd_info.mutex early.

published July 29, 2024

CVSS
—
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nfsd: initialise nfsd_info.mutex early.

nfsd_info.mutex can be dereferenced by svc_pool_stats_start()

immediately after the new netns is created. Currently this can

trigger an oops.

Move the initialisation earlier before it can possibly be dereferenced.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Published
2024-07-29T15:52Z
EPSS history
Timeline
  • 29 JUL 15:52Z
    nfsd: initialise nfsd_info.mutex early.
    cvelistv5