CVE-2024-46696
Description
A flaw was found in the nfsd component of the Linux kernel. This use-after-free (UAF) vulnerability occurs because fields embedded in a delegation reference are accessed after the reference has been dropped, making them unsafe. This could lead to a system crash or other unpredictable behavior.
Statement
This flaw has currently no known exploit.
Mitigation
If NFS server functionality is not required, disable the `nfs-server` service to prevent the `nfsd` kernel module from loading and exposing this vulnerability.
To disable the service:
`sudo systemctl disable --now nfs-server`
This action will stop the NFS server and prevent it from starting automatically on boot. A system reboot may be required to fully unload the `nfsd` module if it was already in use. Disabling the NFS server will impact any services or clients relying on it.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.3 | 7.8 | 9.8 |
| Attack Vector | Local | Local | Network |
| Attack Complexity | Low | Low | Low |
| Privileges Required | Low | Low | None |
| User Interaction | None | None | None |
| Scope | Unchanged | Unchanged | Unchanged |
| Confidentiality | High | High | High |
| Integrity Impact | Low | High | High |
| Availability Impact | High | High | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
NVD: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
