CVE-2024-49999
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/10/2024
Last modified:
29/10/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
afs: Fix the setting of the server responding flag<br />
<br />
In afs_wait_for_operation(), we set transcribe the call responded flag to<br />
the server record that we used after doing the fileserver iteration loop -<br />
but it&#39;s possible to exit the loop having had a response from the server<br />
that we&#39;ve discarded (e.g. it returned an abort or we started receiving<br />
data, but the call didn&#39;t complete).<br />
<br />
This means that op->server might be NULL, but we don&#39;t check that before<br />
attempting to set the server flag.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.8 (including) | 6.10.14 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11 (including) | 6.11.3 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page