CVE-2024-53216

Summary

CVE-2024-53216 is a vulnerability in the Linux kernel's nfsd component. It is caused by a reduced reference count for `cache_head` in `c_show` and `e_show`, which can lead to use-after-free issues in `svc_export_put` and `expkey_put`. These issues arise due to `svc_export_put` directly freeing `ex_uuid`, while `e_show`/`c_show` continue to access it after `cache_put`. Furthermore, the use of `rcu_read_lock`/`rcu_read_unlock` in `svc_export_put`/`expkey_put` prevents sleeping, but these functions ultimately call `path_put`, which triggers a sleeping operation. To resolve these issues, it is recommended to use `rcu_work` to help release `svc_expkey`/`svc_export`, allowing for an asynchronous context to invoke `path_put` and facilitating the freeing of `uuid/exp/key` after an RCU grace period.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.