CVE-2024-35914 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix error cleanup path in nfsd_rename() Commit a8b0026847b8 ("rename(): avoid a deadlock in the case of parents having no common ancestor") added an error bail out path. However this path does not drop the remount protection that has been acquired. Fix the cleanup path to properly drop the remount protection.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0005.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd
https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56
https://lore.kernel.org/linux-cve-announce/2024051957-CVE-2024-35914-3194@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-35914
https://www.cve.org/CVERecord?id=CVE-2024-35914

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-19T08:35:07.367Z

Updated: 2025-05-04T09:08:16.724Z

Reserved: 2024-05-17T13:50:33.122Z

Link: CVE-2024-35914

Vulnrichment

Updated: 2024-08-02T03:21:48.929Z

NVD

Status : Awaiting Analysis

Published: 2024-05-19T09:15:11.910

Modified: 2024-11-21T09:21:11.597

Link: CVE-2024-35914

Redhat

Severity : Moderate

Publid Date: 2024-05-19T00:00:00Z

Links: CVE-2024-35914 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-35914", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-17T13:50:33.122Z", "datePublished": "2024-05-19T08:35:07.367Z", "dateUpdated": "2025-05-04T09:08:16.724Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-04T09:08:16.724Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: Fix error cleanup path in nfsd_rename()\n\nCommit a8b0026847b8 (\"rename(): avoid a deadlock in the case of parents\nhaving no common ancestor\") added an error bail out path. However this\npath does not drop the remount protection that has been acquired. Fix\nthe cleanup path to properly drop the remount protection."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/nfsd/vfs.c"], "versions": [{"version": "a8b0026847b8c43445c921ad2c85521c92eb175f", "lessThan": "331e125e02c08ffaecc1074af78a988a278039bd", "status": "affected", "versionType": "git"}, {"version": "a8b0026847b8c43445c921ad2c85521c92eb175f", "lessThan": "9fe6e9e7b58944037714442384075c17cfde1c56", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/nfsd/vfs.c"], "versions": [{"version": "6.8", "status": "affected"}, {"version": "0", "lessThan": "6.8", "status": "unaffected", "versionType": "semver"}, {"version": "6.8.5", "lessThanOrEqual": "6.8.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.8.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.9"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd"}, {"url": "https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56"}], "title": "nfsd: Fix error cleanup path in nfsd_rename()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-18T16:53:51.345113Z", "id": "CVE-2024-35914", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-18T16:54:02.746Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:21:48.929Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:21:48.929Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-18T16:53:51.345113Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-18T16:53:59.236Z"}}], "cna": {"title": "nfsd: Fix error cleanup path in nfsd_rename()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "a8b0026847b8c43445c921ad2c85521c92eb175f", "lessThan": "331e125e02c08ffaecc1074af78a988a278039bd", "versionType": "git"}, {"status": "affected", "version": "a8b0026847b8c43445c921ad2c85521c92eb175f", "lessThan": "9fe6e9e7b58944037714442384075c17cfde1c56", "versionType": "git"}], "programFiles": ["fs/nfsd/vfs.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.8"}, {"status": "unaffected", "version": "0", "lessThan": "6.8", "versionType": "semver"}, {"status": "unaffected", "version": "6.8.5", "versionType": "semver", "lessThanOrEqual": "6.8.*"}, {"status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/nfsd/vfs.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/331e125e02c08ffaecc1074af78a988a278039bd"}, {"url": "https://git.kernel.org/stable/c/9fe6e9e7b58944037714442384075c17cfde1c56"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: Fix error cleanup path in nfsd_rename()\n\nCommit a8b0026847b8 (\"rename(): avoid a deadlock in the case of parents\nhaving no common ancestor\") added an error bail out path. However this\npath does not drop the remount protection that has been acquired. Fix\nthe cleanup path to properly drop the remount protection."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.8.5", "versionStartIncluding": "6.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.9", "versionStartIncluding": "6.8"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-04T09:08:16.724Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35914", "state": "PUBLISHED", "dateUpdated": "2025-05-04T09:08:16.724Z", "dateReserved": "2024-05-17T13:50:33.122Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-19T08:35:07.367Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}