Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

CVE-2024-50121: Linux kernel NFS server may crash when shutting down

CVE-2024-50121 · published 1 year ago
Summary

The NFS server component in the Linux kernel could trigger warnings and memory errors when the server threads are stopped, potentially leading to a crash. This happens because the cleanup process can interfere with a background task that frees unused client data. Update the kernel to the latest version that includes the fix, or avoid stopping NFS server threads until the issue is resolved.

What to do
  • Update canonical linux-aws-5.15 to version 5.15.0-1080.87~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1086.95~20.04.1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1081.90~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-136.147~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1074.77~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1077.83~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-135.146~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1077.83~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1075.79~20.04.1.
  • Update canonical linux-azure-fde-5.15 to version 5.15.0-1114.123~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1039.39~20.04.1.
  • Update canonical linux to version 5.15.0-135.146.
  • Update canonical linux-aws to version 5.15.0-1080.87.
  • Update canonical linux-aws-6.8 to version 6.8.0-1027.29~22.04.1.
  • Update canonical linux-azure to version 5.15.0-1084.93.
  • Update canonical linux-azure-6.8 to version 6.8.0-1027.32~22.04.1.
  • Update canonical linux-gcp to version 5.15.0-1079.88.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1028.30~22.04.1.
  • Update canonical linux-gke to version 5.15.0-1077.83.
  • Update canonical linux-gkeop to version 5.15.0-1062.70.
  • Update canonical linux-hwe-6.8 to version 6.8.0-58.60~22.04.1.
  • Update canonical linux-ibm to version 5.15.0-1072.75.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1024.24~22.04.1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1073.75.
  • Update canonical linux-intel-iotg to version 5.15.0-1075.81.
  • Update canonical linux-kvm to version 5.15.0-1076.81.
  • Update canonical linux-lowlatency to version 5.15.0-135.146.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-58.60.1~22.04.1.
  • Update canonical linux-nvidia to version 5.15.0-1074.75.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1026.29~22.04.1.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1033.33.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1021.21.
  • Update canonical linux-oracle to version 5.15.0-1077.83.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1024.25~22.04.1.
  • Update canonical linux-raspi to version 5.15.0-1074.77.
  • Update canonical linux-riscv-6.8 to version 6.8.0-58.60.1~22.04.1.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1044.48.
  • Update canonical linux-bluefield to version 5.15.0-1062.64.
  • Update canonical linux-aws-fips to version 5.15.0-1080.87+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1083.92+fips1.
  • Update canonical linux-fips to version 5.15.0-135.146+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1079.88+fips1.
  • Update canonical linux-realtime to version 5.15.0-1080.88.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1020.21~22.04.1.
  • Update canonical linux to version 6.8.0-58.60.
  • Update canonical linux-aws to version 6.8.0-1027.29.
  • Update canonical linux-azure to version 6.8.0-1027.32.
  • Update canonical linux-azure-6.11 to version 6.11.0-1012.12~24.04.1.
  • Update canonical linux-azure-nvidia to version 6.8.0-1014.15.
  • Update canonical linux-gcp to version 6.8.0-1028.30.
  • Update canonical linux-gcp-6.11 to version 6.11.0-1011.11~24.04.1.
  • Update canonical linux-gke to version 6.8.0-1023.27.
  • Update canonical linux-gkeop to version 6.8.0-1010.12.
  • Update canonical linux-ibm to version 6.8.0-1024.24.
  • Update canonical linux-lowlatency to version 6.8.0-58.60.1.
  • Update canonical linux-nvidia to version 6.8.0-1026.29.
  • Update canonical linux-nvidia-6.11 to version 6.11.0-1007.7.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1026.29.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1008.8.
  • Update canonical linux-oem-6.11 to version 6.11.0-1015.15.
  • Update canonical linux-oem-6.8 to version 6.8.0-1026.26.
  • Update canonical linux-oracle to version 6.8.0-1024.25.
  • Update canonical linux-raspi to version 6.8.0-1028.32.
  • Update canonical linux-riscv to version 6.8.0-58.60.1.
  • Update canonical linux-xilinx to version 6.8.0-1017.18.
  • Update canonical linux-fips to version 6.8.0-78.78+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2023.24.
  • Update canonical linux-realtime to version 6.8.1-1020.21.
  • Update debian linux to version 6.1.123-1.
  • Update debian linux to version 6.11.6-1.
  • Update linux kernel to version 6.11.6.
  • Update canonical linux-azure-fde to version 5.15.0-1084.93.1.
  • Update linux linux to version f67138dd338cb564ade7d3755c8cd4f68b46d397 or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 5.10.220, < 5.15
>= 5.15.154, < 6.1
>= 6.2, < 6.6.59
>= 6.7, < 6.11.6
6.12
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1080.87~20.04.1
Fix: upgrade to 5.15.0-1080.87~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1086.95~20.04.1
Fix: upgrade to 5.15.0-1086.95~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1081.90~20.04.1
Fix: upgrade to 5.15.0-1081.90~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-136.147~20.04.1
Fix: upgrade to 5.15.0-136.147~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1074.77~20.04.1
Fix: upgrade to 5.15.0-1074.77~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1077.83~20.04.1
Fix: upgrade to 5.15.0-1077.83~20.04.1
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-135.146~20.04.1
Fix: upgrade to 5.15.0-135.146~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1077.83~20.04.1
Fix: upgrade to 5.15.0-1077.83~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1075.79~20.04.1
Fix: upgrade to 5.15.0-1075.79~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Showing 50 of 174. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 < 5.15.0-1114.123~20.04.1
Fix: upgrade to 5.15.0-1114.123~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1039.39~20.04.1
Fix: upgrade to 5.15.0-1039.39~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-135.146
Fix: upgrade to 5.15.0-135.146
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1080.87
Fix: upgrade to 5.15.0-1080.87
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1027.29~22.04.1
Fix: upgrade to 6.8.0-1027.29~22.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1084.93
Fix: upgrade to 5.15.0-1084.93
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1027.32~22.04.1
Fix: upgrade to 6.8.0-1027.32~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1079.88
Fix: upgrade to 5.15.0-1079.88
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1028.30~22.04.1
Fix: upgrade to 6.8.0-1028.30~22.04.1
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1077.83
Fix: upgrade to 5.15.0-1077.83
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1062.70
Fix: upgrade to 5.15.0-1062.70
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-58.60~22.04.1
Fix: upgrade to 6.8.0-58.60~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1072.75
Fix: upgrade to 5.15.0-1072.75
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1024.24~22.04.1
Fix: upgrade to 6.8.0-1024.24~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1073.75
Fix: upgrade to 5.15.0-1073.75
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1075.81
Fix: upgrade to 5.15.0-1075.81
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1076.81
Fix: upgrade to 5.15.0-1076.81
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-135.146
Fix: upgrade to 5.15.0-135.146
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-58.60.1~22.04.1
Fix: upgrade to 6.8.0-58.60.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1074.75
Fix: upgrade to 5.15.0-1074.75
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1026.29~22.04.1
Fix: upgrade to 6.8.0-1026.29~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1033.33
Fix: upgrade to 5.15.0-1033.33
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1021.21
Fix: upgrade to 5.15.0-1021.21
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1077.83
Fix: upgrade to 5.15.0-1077.83
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1024.25~22.04.1
Fix: upgrade to 6.8.0-1024.25~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1074.77
Fix: upgrade to 5.15.0-1074.77
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-58.60.1~22.04.1
Fix: upgrade to 6.8.0-58.60.1~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1044.48
Fix: upgrade to 5.15.0-1044.48
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1062.64
Fix: upgrade to 5.15.0-1062.64
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1080.87+fips1
Fix: upgrade to 5.15.0-1080.87+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1083.92+fips1
Fix: upgrade to 5.15.0-1083.92+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-135.146+fips1
Fix: upgrade to 5.15.0-135.146+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1079.88+fips1
Fix: upgrade to 5.15.0-1079.88+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1080.88
Fix: upgrade to 5.15.0-1080.88
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1020.21~22.04.1
Fix: upgrade to 6.8.1-1020.21~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-58.60
Fix: upgrade to 6.8.0-58.60
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1027.29
Fix: upgrade to 6.8.0-1027.29
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1027.32
Fix: upgrade to 6.8.0-1027.32
Ubuntu:24.04:LTS canonical linux-azure-6.11 < 6.11.0-1012.12~24.04.1
Fix: upgrade to 6.11.0-1012.12~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-nvidia < 6.8.0-1014.15
Fix: upgrade to 6.8.0-1014.15
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1028.30
Fix: upgrade to 6.8.0-1028.30
Ubuntu:24.04:LTS canonical linux-gcp-6.11 < 6.11.0-1011.11~24.04.1
Fix: upgrade to 6.11.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1023.27
Fix: upgrade to 6.8.0-1023.27
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1010.12
Fix: upgrade to 6.8.0-1010.12
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1024.24
Fix: upgrade to 6.8.0-1024.24
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-58.60.1
Fix: upgrade to 6.8.0-58.60.1
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1026.29
Fix: upgrade to 6.8.0-1026.29
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 < 6.11.0-1007.7
Fix: upgrade to 6.11.0-1007.7
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1026.29.1
Fix: upgrade to 6.8.0-1026.29.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-oem-6.11 < 6.11.0-1015.15
Fix: upgrade to 6.11.0-1015.15
Ubuntu:24.04:LTS canonical linux-oem-6.8 < 6.8.0-1026.26
Fix: upgrade to 6.8.0-1026.26
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1024.25
Fix: upgrade to 6.8.0-1024.25
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1028.32
Fix: upgrade to 6.8.0-1028.32
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv < 6.8.0-58.60.1
Fix: upgrade to 6.8.0-58.60.1
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1017.18
Fix: upgrade to 6.8.0-1017.18
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-78.78+fips1
Fix: upgrade to 6.8.0-78.78+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2023.24
Fix: upgrade to 6.8.0-2023.24
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1020.21
Fix: upgrade to 6.8.1-1020.21
Debian:12 debian linux < 6.1.123-1
Fix: upgrade to 6.1.123-1
Debian:13 debian linux < 6.11.6-1
Fix: upgrade to 6.11.6-1
– linux linux < f67138dd338cb564ade7d3755c8cd4f68b46d397
6.2
Linux linux kernel >= 6.2.0, < 6.11.6
Fix: upgrade to 6.11.6
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1084.93.1
Fix: upgrade to 5.15.0-1084.93.1
Original advisory text
nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
In the Linux kernel, the following vulnerability has been resolved: nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net In the normal case, when we excute `echo 0 > /proc/fs/nfsd/threads`, the function `nfs4_state_destroy_net` in `nfs4_state_shutdown_net` will release all resources related to the hashed `nfs4_client`. If the `nfsd_client_shrinker` is running concurrently, the `expire_client` function will first unhash this client and then destroy it. This can lead to the following warning. Additionally, numerous use-after-free errors may occur as well. nfsd_client_shrinker echo 0 > /proc/fs/nfsd/threads expire_client nfsd_shutdown_net unhash_client ... nfs4_state_shutdown_net /* won't wait shrinker exit */ /* cancel_work(&nn->nfsd_shrinker_work) * nfsd_file for this /* won't destroy unhashed client1 */ * client1 still alive nfs4_state_destroy_net */ nfsd_file_cache_shutdown /* trigger warning */ kmem_cache_destroy(nfsd_file_slab) kmem_cache_destroy(nfsd_file_mark_slab) /* release nfsd_file and mark */ __destroy_client ==================================================================== BUG nfsd_file (Not tainted): Objects remaining in nfsd_file on __kmem_cache_shutdown() -------------------------------------------------------------------- CPU: 4 UID: 0 PID: 764 Comm: sh Not tainted 6.12.0-rc3+ #1 dump_stack_lvl+0x53/0x70 slab_err+0xb0/0xf0 __kmem_cache_shutdown+0x15c/0x310 kmem_cache_destroy+0x66/0x160 nfsd_file_cache_shutdown+0xac/0x210 [nfsd] nfsd_destroy_serv+0x251/0x2a0 [nfsd] nfsd_svc+0x125/0x1e0 [nfsd] write_threads+0x16a/0x2a0 [nfsd] nfsctl_transaction_write+0x74/0xa0 [nfsd] vfs_write+0x1a5/0x6d0 ksys_write+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e ==================================================================== BUG nfsd_file_mark (Tainted: G B W ): Objects remaining nfsd_file_mark on __kmem_cache_shutdown() -------------------------------------------------------------------- dump_stack_lvl+0x53/0x70 slab_err+0xb0/0xf0 __kmem_cache_shutdown+0x15c/0x310 kmem_cache_destroy+0x66/0x160 nfsd_file_cache_shutdown+0xc8/0x210 [nfsd] nfsd_destroy_serv+0x251/0x2a0 [nfsd] nfsd_svc+0x125/0x1e0 [nfsd] write_threads+0x16a/0x2a0 [nfsd] nfsctl_transaction_write+0x74/0xa0 [nfsd] vfs_write+0x1a5/0x6d0 ksys_write+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e To resolve this issue, cancel `nfsd_shrinker_work` using synchronous mode in nfs4_state_shutdown_net.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published5 Nov 2024
Updated2 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta