7.8

CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open()

Modified
AliasesUBUNTU-CVE-2024-53173DEBIAN-CVE-2024-53173
Published 27-12-2024Last modified 05-08-2026

Vulnerability summary

CVE-2024-53173 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 18.5% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.27%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 119 · Related 117
DLA-4075-1DLA-4076-1RHSA-2025:6966SUSE-SU-2025:0117-1SUSE-SU-2025:0152-1SUSE-SU-2025:0153-1

Showing 100 of 121.

Timeline

  1. 27-12-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that when two threads are opening files at the same time, and are forced to abort before a reply is seen, then the call to nfs_release_seqid() in nfs4_opendata_free() can result in a use-after-free of the pointer to the defunct rpc task of the other thread. The fix is to ensure that if the RPC call is aborted before the call to nfs_wait_on_sequence() is complete, then we must call nfs_release_seqid() in nfs4_open_release() before the rpc_task is freed.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.27%

Chance of exploitation in the next 30 days

Percentile

19%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.27% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu134 products
  • linuxAll versions (No fix recorded) | < 4.4.0-268.302 | < 4.15.0-237.249 | < 5.4.0-211.231 | < 5.15.0-135.146 | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1143.149 | < 4.4.0-1181.196 | < 4.15.0-1180.193 | < 5.4.0-1142.152 | < 5.15.0-1080.87 | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < 1cfae9575296f5040cdc84b0730e79078c081d2d | ≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < 7bf6bf130af8ee7d93a99c28a7512df3017ec759 | ≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < 5237a297ffd374a1c4157a53543b7a69d7bbbc03 | ≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < 2ab9639f16b05d948066a6c4cf19a0fdc61046ff | ≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < ba6e6c04f60fe52d91520ac4d749d372d4c74521 | ≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < 229a30ed42bb87bcb044c5523fabd9e4f0e75648 | ≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < e2277a1d9d5cd0d625a4fd7c04fce2b53e66df77 | ≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < b56ae8e715557b4fc227c9381d2e681ffafe7b15 | ≥ 24ac23ab88df5b21b5b2df8cde748bf99b289099, < 2fdb05dc0931250574f0cb0ebeb5ed8e20f4a889 | 2.6.16
  • linux_kernel≥ 2.6.16, < 4.19.325 | ≥ 4.20, < 5.4.287 | ≥ 5.5, < 5.10.231 | ≥ 5.11, < 5.15.174 | ≥ 5.16, < 6.1.120 | ≥ 6.2, < 6.6.64 | ≥ 6.7, < 6.11.11 | ≥ 6.12, < 6.12.2
Debian1 product
  • linux< 6.1.123-1 | < 6.12.3-1

3 vendors · 137 products

References

58 links
Show all 58 references