PT-2025-16577
CVE-2024-58092
·
Published
2025-01-06
·
Updated
2026-10-13
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the initialization of legacy client tracking in the Linux kernel's nfsd component. The problem arises from the duplicate call to
nfsd4 legacy tracking ops->init(), which triggers a BUG ON() condition in nfsd4 init recdir(). This has been resolved by removing the unnecessary call to nfsd4 legacy tracking ops->init() in check for legacy methods(), allowing the initialization to be handled by the caller nfsd4 client tracking init().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾