CVE-2024-53073 NFSD: Never decrement pending_async_copies on error
A logic error in the Linux kernel's NFS server could lead to a denial of service due to incorrect handling of pending async copies on error.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53073?
CVE-2024-53073 is a high-severity vulnerability in Linux kernel, published on 19 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Never decrement pending_async_copies on error
The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn->pending_async_copies.
Which versions are affected by CVE-2024-53073?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-53073?
Apply the vendor's patch.
Is CVE-2024-53073 being exploited?
There is no known exploitation of CVE-2024-53073 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2024-53073, GHSA-4f73-836m-4mcr, UBUNTU-CVE-2024-53073.