CVE-2024-43826
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
17/08/2024
Last modified:
29/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
nfs: pass explicit offset/count to trace events<br />
<br />
nfs_folio_length is unsafe to use without having the folio locked and a<br />
check for a NULL ->f_mapping that protects against truncations and can<br />
lead to kernel crashes. E.g. when running xfstests generic/065 with<br />
all nfs trace points enabled.<br />
<br />
Follow the model of the XFS trace points and pass in an explіcit offset<br />
and length. This has the additional benefit that these values can<br />
be more accurate as some of the users touch partial folio ranges.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.3 (including) | 6.10.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page