CVE-2024-43826
Last modified
CVE-2024-43826 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfs_folio_length is unsafe to use without having the folio locked and a check for a NULL ->f_mapping that protects against truncations and can lead to kernel crashes. E.g. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfs_folio_length is unsafe to use without having the folio locked and a check for a NULL ->f_mapping that protects against truncations and can lead to kernel crashes. E.g. when running xfstests generic/065 with all nfs trace points enabled. Follow the model of the XFS trace points and pass in an explіcit offset and length. This has the additional benefit that these values can be more accurate as some of the users touch partial folio ranges.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.3, < 6.10.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-43826?
How severe is CVE-2024-43826?
How do I fix CVE-2024-43826?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-43820In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43821In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43822In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43823In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43824In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43825In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2024-43827In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43828In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-43829In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-4383The Simple Membership plugin for WordPress is vulnerable to …5.4
- CVE-2024-43830In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2024-43831In the Linux kernel, the following vulnerability has been re…5.5
Are you affected by CVE-2024-43826?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST