CVE-2024-57927
nfs: Fix oops in nfs_netfs_init_request() when copying to cache
Published:
1/19/2025
Last updated:
10/1/2025
Reserved:
1/19/2025
In the Linux kernel, the following vulnerability has been resolved:
nfs: Fix oops in nfs_netfs_init_request() when copying to cache
When netfslib wants to copy some data that has just been read on behalf of
nfs, it creates a new write request and calls nfs_netfs_init_request() to
initialise it, but with a NULL file pointer. This causes
nfs_file_open_context() to oops - however, we don't actually need the nfs
context as we're only going to write to the cache.
Fix this by just returning if we aren't given a file pointer and emit a
warning if the request was for something other than copy-to-cache.
Further, fix nfs_netfs_free_request() so that it doesn't try to free the
context if the pointer is NULL.
CNA assigner:
Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
Requested by:
n/a
Products affected (4)
| Product |
Vendor |
Version |
| Linux |
Linux
|
104
|
| Linux |
Linux
|
IL ETH BK DI8 DO4 2TX-XC-PAC (2701388) all revisions
|
| Linux |
Linux
|
n/a
|
| Linux |
Linux
|
Fixed: 5.0.0.113
|