CVE-2024-56558

Summary

CVE-2024-56558: In the Linux kernel's nfsd subsystem, a use-after-free vulnerability was identified. The function `e_show` was called with RCU protection, but this only prevented `exp` from being freed, allowing its reference count to drop to zero. This issue was resolved by using `cache_get_rcu` to ensure `exp` remains active. A refcount use-after-free warning occurred when `exp_get` was called, causing a potential security vulnerability. This vulnerability affected Linux kernel version 6.12.0-rc3+ and could lead to a denial-of-service or potentially more serious attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.