Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-53066— nfs: Fix KMSAN warning in decode_getfattr_attrs()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在decode_getfattr_attrs函数中存在KMSAN警告。

CVSS 9.8 · Critical EPSS 0.66% · P51

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 88034c3d88c2c48b215f2cc5eb22e564aa817f9c< 25ffd294fef81a7f3cd9528adf21560c04d98747 affected
88034c3d88c2c48b215f2cc5eb22e564aa817f9c< bbfcd261cc068fe1cd02a4e871275074a0daa4e2 affected
88034c3d88c2c48b215f2cc5eb22e564aa817f9c< 8fc5ea9231af9122d227c9c13f5e578fca48d2e3 affected
88034c3d88c2c48b215f2cc5eb22e564aa817f9c< 9b453e8b108a5a93a6e348cf2ba4c9c138314a00 affected
88034c3d88c2c48b215f2cc5eb22e564aa817f9c< f6b2b2b981af8e7d7c62d34143acefa4e1edfe8b affected
88034c3d88c2c48b215f2cc5eb22e564aa817f9c< f749cb60a01f8391c760a1d6ecd938cadacf9549 affected
88034c3d88c2c48b215f2cc5eb22e564aa817f9c< 9be0a21ae52b3b822d0eec4d14e909ab394f8a92 affected
88034c3d88c2c48b215f2cc5eb22e564aa817f9c< dc270d7159699ad6d11decadfce9633f0f71c1db affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-53066

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
nfs: Fix KMSAN warning in decode_getfattr_attrs()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decode_getfattr_attrs() Fix the following KMSAN warning: CPU: 1 UID: 0 PID: 7651 Comm: cp Tainted: G B Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009) ===================================================== ===================================================== BUG: KMSAN: uninit-value in decode_getfattr_attrs+0x2d6d/0x2f90 decode_getfattr_attrs+0x2d6d/0x2f90 decode_getfattr_generic+0x806/0xb00 nfs4_xdr_dec_getattr+0x1de/0x240 rpcauth_unwrap_resp_decode+0xab/0x100 rpcauth_unwrap_resp+0x95/0xc0 call_decode+0x4ff/0xb50 __rpc_execute+0x57b/0x19d0 rpc_execute+0x368/0x5e0 rpc_run_task+0xcfe/0xee0 nfs4_proc_getattr+0x5b5/0x990 __nfs_revalidate_inode+0x477/0xd00 nfs_access_get_cached+0x1021/0x1cc0 nfs_do_access+0x9f/0xae0 nfs_permission+0x1e4/0x8c0 inode_permission+0x356/0x6c0 link_path_walk+0x958/0x1330 path_lookupat+0xce/0x6b0 filename_lookup+0x23e/0x770 vfs_statx+0xe7/0x970 vfs_fstatat+0x1f2/0x2c0 __se_sys_newfstatat+0x67/0x880 __x64_sys_newfstatat+0xbd/0x120 x64_sys_call+0x1826/0x3cf0 do_syscall_64+0xd0/0x1b0 entry_SYSCALL_64_after_hwframe+0x77/0x7f The KMSAN warning is triggered in decode_getfattr_attrs(), when calling decode_attr_mdsthreshold(). It appears that fattr->mdsthreshold is not initialized. Fix the issue by initializing fattr->mdsthreshold to NULL in nfs_fattr_init().
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在decode_getfattr_attrs函数中存在KMSAN警告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 88034c3d88c2c48b215f2cc5eb22e564aa817f9c ~ 25ffd294fef81a7f3cd9528adf21560c04d98747 -
Linux Linux 3.5 -

II. Public POCs for CVE-2024-53066

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-53066

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-53066 (2)

Same Patch Batch · Linux · 2024-11-19 · 88 CVEs total

CVE-2024-50283 9.8 CRITICAL ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
CVE-2024-50286 9.8 CRITICAL ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
CVE-2024-50276 9.8 CRITICAL net: vertexcom: mse102x: Fix possible double free of TX skb
CVE-2024-53058 9.4 CRITICAL net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
CVE-2024-53082 8.4 HIGH virtio_net: Add hash_key_length check
CVE-2024-50299 8.2 HIGH sctp: properly validate chunk size in sctp_sf_ootb()
CVE-2024-50293 7.8 HIGH net/smc: do not leave a dangling sk pointer in __smc_create()
CVE-2024-50291 7.8 HIGH media: dvb-core: add missing buffer index check
CVE-2024-50294 7.8 HIGH rxrpc: Fix missing locking causing hanging calls
CVE-2024-50288 7.8 HIGH media: vivid: fix buffer overwrite when using > 32 buffers
CVE-2024-50301 7.8 HIGH security/keys: fix slab-out-of-bounds in key_task_permission
CVE-2024-53063 7.8 HIGH media: dvbdev: prevent the risk of out of memory access
CVE-2024-53088 7.8 HIGH i40e: fix race condition by adding filter's intermediate sync state
CVE-2024-53080 7.8 HIGH drm/panthor: Lock XArray when getting entries for the VM
CVE-2024-53079 7.8 HIGH mm/thp: fix deferred split unqueue naming and locking
CVE-2024-53076 7.8 HIGH iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
CVE-2024-53044 7.8 HIGH net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
CVE-2024-50264 7.8 HIGH vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
CVE-2024-50300 7.8 HIGH regulator: rtq2208: Fix uninitialized use of regulator_config
CVE-2024-53057 7.8 HIGH net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

Showing top 20 of 88 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-53066

No comments yet

Leave a comment