Wind River Support Network

HomeDefectsLIN1024-3201

Fixed

LIN1024-3201 : Security Advisory - linux - CVE-2024-42078

Created: Jul 29, 2024 Updated: Aug 28, 2024

Resolved Date: Jul 29, 2024

Found In Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: initialise nfsd_info.mutex early.

nfsd_info.mutex can be dereferenced by svc_pool_stats_start()
immediately after the new netns is created.  Currently this can
trigger an oops.

Move the initialisation earlier before it can possibly be dereferenced.

CREATE(Triage):(User=admin) CVE-2024-42078 (https://nvd.nist.gov/vuln/detail/CVE-2024-42078)