CVE-2024-53216

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc3+

Description A vulnerability in the Linux kernel has been resolved, specifically in the nfsd module. The issue arises when the last reference for cache head is reduced to zero in c show and e show using rcu read lock and rcu read unlock. This leads to two problems:

Recommendations To resolve the issue, use rcu work to help release svc expkey/svc export. This approach allows for an asynchronous context to invoke path put and also facilitates the freeing of uuid/exp/key after an RCU grace period. As a temporary workaround, consider disabling the svc export show function until a patch is available. Restrict access to the vulnerable nfsd module to minimize the risk of exploitation.