CVE-2024-53073

CVE-2024-53073

High · published November 19, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
42.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Never decrement pending_async_copies on error

The error flow in nfsd4_copy() calls cleanup_async_copy(), which

already decrements nn->pending_async_copies.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.5th percentile
Published
2024-11-19T23:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.11.3, < 6.11.76.11.7
References (6)
https://git.kernel.org/stable/c/1421883aa30c5d26bc3370e2d19cb350f0d5ca28 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8286f8b622990194207df9ab852e0f87c60d35e9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9467c49437e948c541569007cd412d577942e635 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/949ee5d44d1fd95119b29b3382a933cdc617bf9e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ed98d26021db0fe62c327aa9f5e57a90bff3fa94 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fb79d68a36e21960341ccab07d1ac06d93830321 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 19 NOV 17:31Z
    NFSD: Never decrement pending_async_copies on error
    cvelistv5