CVE-2024-46697
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
In the Linux kernel, in the nfsd module, there is a vulnerability where if nfsd4_encode_fattr4 does a "goto out" before checking for the security label, the args.context field remains uninitialized on the stack and is later freed. The fix initializes it early.
Risk Assessment
The risk is the use of uninitialized stack memory, which could lead to unpredictable behavior or potential information leak in the NFS service.
Recommendation
It is recommended to apply the kernel patch that initializes the args.context field before use and update systems to a kernel version containing this fix.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4_fattr_args.context is zeroed out If nfsd4_encode_fattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'll then try to free. Initialize it early.