CVE-2024-50046

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58

Description: A NULL-pointer dereference issue was found in the Linux kernel's NFSv4 implementation, specifically in the nfs42 complete copies() function. This issue can occur when files are copied from one location to another on the same NFS server, resulting in a kernel crash. The error is indicated by a syslog message showing a state recovery failure for an open file, followed by a memory abort and an internal error.

Recommendations: To resolve this issue, update the Linux kernel to version 6.6.58 or later. As a temporary workaround, consider disabling the nfs42 complete copies() function until a patch is available. However, this may have unintended consequences and should be approached with caution.