CVE-2024-36907

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc6+

Description The vulnerability is related to the SUNRPC module in the Linux kernel, specifically with the TCP TLS functionality. A missing rpc stat for TCP TLS can cause a kernel NULL pointer dereference when mounting with xprtsec=tls, leading to a kernel oops. The issue arises from a commit that added functionality to specify rpc stats function but missed adding it to the TCP TLS functionality.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the SUNRPC vulnerability, which adds the missing rpc stat for TCP TLS. Ensure that the updated kernel version is compatible with your system and configuration.