Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected c5967721e1063648b0506481585ba7e2e49a075e before e0b66698a5ae41078f7490e8b3527013f5fccd6c; affected c5967721e1063648b0506481585ba7e2e49a075e before 1116e0e372eb16dd907ec571ce5d4af325c55c10 |
| Linux / Linux | affected 6.9; unaffected 0 before 6.9; unaffected 6.10.8 through 6.10.*; unaffected 6.11 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e0b66698a5ae41078f7490e8b3527013f5fccd6c
- https://git.kernel.org/stable/c/1116e0e372eb16dd907ec571ce5d4af325c55c10
ADP enrichment
No English description supplied.
No references supplied.