CVE-2024-50241

NFSD: Initialize struct nfsd4_copy earlier

MEDIUM

5.5

CVSS Score

Published: November 9, 2024 at 10:14 AM UTC

Updated: August 4, 2026 at 11:21 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.5%

Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4_copy earlier Ensure the refcount and async_copies fields are initialized early. cleanup_async_copy() will reference these fields if an error occurs in nfsd4_copy(). If they are not correctly initialized, at the very least, a refcount underflow occurs.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 6.10.146.10.14 ≤ v < 6.116.10.14 ≤ v < 6.11.76.11.3 ≤ v < 6.11.743e46ee5efc03990b223f7aa8b77aa9c3d3acfdf6.10.14 6.11.3 6.12 rc1 6.12 rc2 6.12 rc3 6.12 rc4 6.12 rc56a488ad7745b8f64625c6d3a24ce7e448e83f11b7ea9260874b779637aff6d24c344b8ef4ac862a09e52ff544e0bfa09ee339fd7b0937ee3c080c24eaadc3bbea163b6caaaebfdd2b6c4667fbc726752ae267989b7b7933dfedcd26468d0a88fc3a9da9eb4e21431a0db4854b5023cd5af001be557e6c3db

Vendor states this is fixed in 059434d23c4578d9d02efb92d848ea21bc640112 (fixed)

Vendor states this is fixed in 421f1a2a1afb47d88de09457ef7687e1df7bc997 (fixed)

Vendor states this is fixed in 63fab04cbd0f96191b6e5beedc3b643b01c15889 (fixed)

Vendor states this is fixed in 7267625baf365a969f1b25ded6f07b64bc90ec5b (fixed)

Vendor states this is fixed in c3074003fa6837c2b89a34d8d12d9463b59d22d6 (fixed)

Vendor states this is fixed in e30a9a2f69c34a00a3cb4fd45c5d231929e66fb1 (fixed)

Affected range stops below 6.11, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.11.7, so it looks safe — our inference, not a vendor statement