CVE-2024-46682

In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open Prior to commit 3f29cc82a84c ("nfsd: split sc_status out of sc_type") states_show() relied on sc_type field to be of valid type before calling into a subfunction to show content of a particular stateid. From that commit, we split the validity of the stateid into sc_status and no longer changed sc_type to 0 while unhashing the stateid. This resulted in kernel oopsing for nfsv4.0 opens that stay around and in nfs4_show_open() would derefence sc_file which was NULL. Instead, for closed open stateids forgo displaying information that relies of having a valid sc_file. To reproduce: mount the server with 4.0, read and close a file and then on the server cat /proc/fs/nfsd/clients/2/states [ 513.590804] Call trace: [ 513.590925] _raw_spin_lock+0xcc/0x160 [ 513.591119] nfs4_show_open+0x78/0x2c0 [nfsd] [ 513.591412] states_show+0x44c/0x488 [nfsd] [ 513.591681] seq_read_iter+0x5d8/0x760 [ 513.591896] seq_read+0x188/0x208 [ 513.592075] vfs_read+0x148/0x470 [ 513.592241] ksys_read+0xcc/0x178

• CWE-476

• https://git.kernel.org/stable/c/a204501e1743d695ca2930ed25a2be9f8ced96d3Patch
• https://git.kernel.org/stable/c/ba0b697de298285301c71c258598226e06494236Patch

Published

Sep 13, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-46677In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-46678In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-46679In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-4668The Gum Elementor Addon plugin for WordPress is vulnerable t…6.4
• CVE-2024-46680In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-46681In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-46683In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-46684In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-46685In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-46686In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-46687In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-46688In the Linux kernel, the following vulnerability has been re…5.5