CVE-2024-36958

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the NFSD component in the Linux kernel, specifically with the nfsd4 encode fattr4() function. The problem arises because args.acl is not initialized early and is used in an unconditional call to kfree() when exiting nfsd4 encode fattr4(). This can lead to a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.