CVE - CVE-2024-53173

CVE-ID
CVE-2024-53173	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that when two threads are opening files at the same time, and are forced to abort before a reply is seen, then the call to nfs_release_seqid() in nfs4_opendata_free() can result in a use-after-free of the pointer to the defunct rpc task of the other thread. The fix is to ensure that if the RPC call is aborted before the call to nfs_wait_on_sequence() is complete, then we must call nfs_release_seqid() in nfs4_open_release() before the rpc_task is freed.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1cfae9575296f5040cdc84b0730e79078c081d2d URL:https://git.kernel.org/stable/c/1cfae9575296f5040cdc84b0730e79078c081d2d MISC:https://git.kernel.org/stable/c/229a30ed42bb87bcb044c5523fabd9e4f0e75648 URL:https://git.kernel.org/stable/c/229a30ed42bb87bcb044c5523fabd9e4f0e75648 MISC:https://git.kernel.org/stable/c/2ab9639f16b05d948066a6c4cf19a0fdc61046ff URL:https://git.kernel.org/stable/c/2ab9639f16b05d948066a6c4cf19a0fdc61046ff MISC:https://git.kernel.org/stable/c/2fdb05dc0931250574f0cb0ebeb5ed8e20f4a889 URL:https://git.kernel.org/stable/c/2fdb05dc0931250574f0cb0ebeb5ed8e20f4a889 MISC:https://git.kernel.org/stable/c/5237a297ffd374a1c4157a53543b7a69d7bbbc03 URL:https://git.kernel.org/stable/c/5237a297ffd374a1c4157a53543b7a69d7bbbc03 MISC:https://git.kernel.org/stable/c/7bf6bf130af8ee7d93a99c28a7512df3017ec759 URL:https://git.kernel.org/stable/c/7bf6bf130af8ee7d93a99c28a7512df3017ec759 MISC:https://git.kernel.org/stable/c/b56ae8e715557b4fc227c9381d2e681ffafe7b15 URL:https://git.kernel.org/stable/c/b56ae8e715557b4fc227c9381d2e681ffafe7b15 MISC:https://git.kernel.org/stable/c/ba6e6c04f60fe52d91520ac4d749d372d4c74521 URL:https://git.kernel.org/stable/c/ba6e6c04f60fe52d91520ac4d749d372d4c74521 MISC:https://git.kernel.org/stable/c/e2277a1d9d5cd0d625a4fd7c04fce2b53e66df77 URL:https://git.kernel.org/stable/c/e2277a1d9d5cd0d625a4fd7c04fce2b53e66df77
Assigning CNA
kernel.org
Date Record Created
20241119	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241119)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)