CVE-2024-42078

Updated: 2024-07-31 05:23:53.010574

Description:

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialise nfsd_info.mutex early. nfsd_info.mutex can be dereferenced by svc_pool_stats_start() immediately after the new netns is created. Currently this can trigger an oops. Move the initialisation earlier before it can possibly be dereferenced.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2024-08-01 05:24:24
AlmaLinux 9.2 FIPS kernel 5.14.0 5.5 MEDIUM Ignored 2024-08-01 05:24:24
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-08-01 05:24:24
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2024-08-01 05:24:24
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-08-01 05:24:24
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-08-01 05:24:24
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-08-01 05:24:24
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-08-01 05:24:24
CloudLinux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2024-08-01 05:24:23
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-08-01 05:24:24
Total: 13