CVE-2024-53146
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
In the Linux kernel, a potential integer overflow was found in the NFSD module. If the tag length is >= U32_MAX - 3, the "length + 4" addition can overflow. The fix splits the decoding into several steps to avoid arithmetic on the unsafe length value.
Risk Assessment
The integer overflow could lead to incorrect behavior of the NFS server, potentially allowing an attacker to remotely cause a crash or unexpected system behavior.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix for CVE-2024-53146 as soon as possible.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value.