CVE-2024-53066— nfs: Fix KMSAN warning in decode_getfattr_attrs()
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-53066
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
nfs: Fix KMSAN warning in decode_getfattr_attrs()
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decode_getfattr_attrs() Fix the following KMSAN warning: CPU: 1 UID: 0 PID: 7651 Comm: cp Tainted: G B Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009) ===================================================== ===================================================== BUG: KMSAN: uninit-value in decode_getfattr_attrs+0x2d6d/0x2f90 decode_getfattr_attrs+0x2d6d/0x2f90 decode_getfattr_generic+0x806/0xb00 nfs4_xdr_dec_getattr+0x1de/0x240 rpcauth_unwrap_resp_decode+0xab/0x100 rpcauth_unwrap_resp+0x95/0xc0 call_decode+0x4ff/0xb50 __rpc_execute+0x57b/0x19d0 rpc_execute+0x368/0x5e0 rpc_run_task+0xcfe/0xee0 nfs4_proc_getattr+0x5b5/0x990 __nfs_revalidate_inode+0x477/0xd00 nfs_access_get_cached+0x1021/0x1cc0 nfs_do_access+0x9f/0xae0 nfs_permission+0x1e4/0x8c0 inode_permission+0x356/0x6c0 link_path_walk+0x958/0x1330 path_lookupat+0xce/0x6b0 filename_lookup+0x23e/0x770 vfs_statx+0xe7/0x970 vfs_fstatat+0x1f2/0x2c0 __se_sys_newfstatat+0x67/0x880 __x64_sys_newfstatat+0xbd/0x120 x64_sys_call+0x1826/0x3cf0 do_syscall_64+0xd0/0x1b0 entry_SYSCALL_64_after_hwframe+0x77/0x7f The KMSAN warning is triggered in decode_getfattr_attrs(), when calling decode_attr_mdsthreshold(). It appears that fattr->mdsthreshold is not initialized. Fix the issue by initializing fattr->mdsthreshold to NULL in nfs_fattr_init().
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在decode_getfattr_attrs函数中存在KMSAN警告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-53066
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-53066
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-11-19 · 88 CVEs total
| CVE-2024-53056 | drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() | |
| CVE-2024-53052 | io_uring/rw: fix missing NOWAIT check for O_DIRECT start write | |
| CVE-2024-53053 | scsi: ufs: core: Fix another deadlock during RTC update | |
| CVE-2024-53050 | drm/i915/hdcp: Add encoder check in hdcp2_get_capability | |
| CVE-2024-53049 | slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof | |
| CVE-2024-53047 | mptcp: init: protect sched with rcu_read_lock | |
| CVE-2024-53045 | ASoC: dapm: fix bounds checker error in dapm_widget_list_create | |
| CVE-2024-53046 | arm64: dts: imx8ulp: correct the flexspi compatible string | |
| CVE-2024-53044 | net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() | |
| CVE-2024-53048 | ice: fix crash on probe for DPLL enabled E810 LOM | |
| CVE-2024-53055 | wifi: iwlwifi: mvm: fix 6 GHz scan construction | |
| CVE-2024-53057 | net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT | |
| CVE-2024-53058 | net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data | |
| CVE-2024-53059 | wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() | |
| CVE-2024-53060 | drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported | |
| CVE-2024-53061 | media: s5p-jpeg: prevent buffer overflows | |
| CVE-2024-53062 | media: mgb4: protect driver against spectre | |
| CVE-2024-53064 | idpf: fix idpf_vc_core_init error path | |
| CVE-2024-53063 | media: dvbdev: prevent the risk of out of memory access | |
| CVE-2024-53065 | mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create |
Showing top 20 of 88 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2024-53066
No comments yet