UBUNTU-CVE-2024-58092
Vulnerability Summary
Timeline
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4_legacy_tracking_ops->init() call in check_for_legacy_methods(). That will be handled in the caller (nfsd4_client_tracking_init()). Otherwise, we'll wind up calling nfsd4_legacy_tracking_ops->init() twice, and the second time we'll trigger the BUG_ON() in nfsd4_init_recdir().
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Systems
- ubuntu•linux
< 6.8.0-86.87
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
< 6.8.0-1041.43
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.2
all
- ubuntu•linux-aws-6.5
all
- ubuntu•linux-aws-6.8
< 6.8.0-1041.43~22.04.1
- ubuntu•linux-aws-fips
< 6.8.0-1041.43+fips1
- ubuntu•linux-azure
all | < 6.8.0-1041.47
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.11
< 6.11.0-1018.18~24.04.1
- ubuntu•linux-azure-6.2
all
- ubuntu•linux-azure-6.5
all
- ubuntu•linux-azure-6.8
< 6.8.0-1041.47~22.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fde-5.19
all
- ubuntu•linux-azure-fde-6.2
all
- ubuntu•linux-azure-fips
< 6.8.0-1044.50+fips1
- ubuntu•linux-azure-nvidia
< 6.8.0-1029.32
- ubuntu•linux-fips
< 6.8.0-86.87+fips1
- ubuntu•linux-gcp
all | < 6.8.0-1042.45
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.19
all
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-6.11
< 6.11.0-1016.16~24.04.1
- ubuntu•linux-gcp-6.2
all
- ubuntu•linux-gcp-6.5
all
- ubuntu•linux-gcp-6.8
< 6.8.0-1042.45~22.04.1
- ubuntu•linux-gcp-fips
< 6.8.0-1042.45+fips1
- ubuntu•linux-gke
all | < 6.8.0-1038.43
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
all
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
all | < 6.8.0-1025.28
- ubuntu•linux-gkeop-5.15
all
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
all
- ubuntu•linux-hwe-5.11
all
Showing first 50 affected entries in server-rendered view.
References (20)
- https://ubuntu.com/security/CVE-2024-58092
- https://www.cve.org/CVERecord?id=CVE-2024-58092
- https://git.kernel.org/linus/de71d4e211eddb670b285a0ea477a299601ce1ca
- https://git.kernel.org/stable/c/95407304253a4bf03494d921c6913e220c26cc63
- https://git.kernel.org/stable/c/cdd66082b227eb695cbf54b7c121ea032e869981
- https://git.kernel.org/stable/c/de71d4e211eddb670b285a0ea477a299601ce1ca
- https://ubuntu.com/security/notices/USN-7605-1
- https://ubuntu.com/security/notices/USN-7606-1
- https://ubuntu.com/security/notices/USN-7605-2
- https://ubuntu.com/security/notices/USN-7628-1
- https://ubuntu.com/security/notices/USN-7835-1
- https://ubuntu.com/security/notices/USN-7835-2
- https://ubuntu.com/security/notices/USN-7835-3
- https://ubuntu.com/security/notices/USN-7835-4
- https://ubuntu.com/security/notices/USN-7835-5
- https://ubuntu.com/security/notices/USN-7835-6
- https://ubuntu.com/security/notices/USN-7887-1
- https://ubuntu.com/security/notices/USN-7887-2
- https://ubuntu.com/security/notices/USN-7940-1
- https://ubuntu.com/security/notices/USN-7940-2