CVE-2024-47692

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description A vulnerability in the Linux kernel has been resolved, specifically in the nfsd component. When a corrupted main.sqlite file is present in /var/lib/nfs/nfsdcld/, it may result in a null pointer dereference in the nfs4 client to reclaim() function. This occurs because memdup user() returns ZERO SIZE PTR when namelen is 0. The issue can be triggered when accessing the name.data assigned the value of ZERO SIZE PTR.

Technical details about exploitation include:

Recommendations To resolve the issue, update the Linux kernel to version 6.6.58 or later. As a temporary workaround, consider checking namelen to prevent null pointer dereference in the nfs4 client to reclaim() function.