CVE-2024-46697

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when nfsd4 encode fattr4 performs a "goto out" before checking for the security label, resulting in args.context being set to uninitialized data on the stack, which is then attempted to be freed. To resolve this, nfsd4 fattr args.context is initialized early.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.