CVE-2024-49974

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49974

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing appears to limit the number of concurrent async COPY operations that clients can start. In addition, AFAICT each async COPY can copy an unlimited number of 4MB chunks, so can run for a long time. Thus IMO async COPY can become a DoS vector. Add a restriction mechanism that bounds the number of concurrent background COPY operations. Start simple and try to be fair -- this patch implements a per-namespace limit. An async COPY request that occurs while this limit is exceeded gets NFS4ERR_DELAY. The requesting client can choose to send the request again after a delay or fall back to a traditional read/write style copy. If there is need to make the mechanism more sophisticated, we can visit that in future patches.

References
Link Resource
https://git.kernel.org/stable/c/43e46ee5efc03990b223f7aa8b77aa9c3d3acfdf
https://git.kernel.org/stable/c/6a488ad7745b8f64625c6d3a24ce7e448e83f11b Patch
https://git.kernel.org/stable/c/7ea9260874b779637aff6d24c344b8ef4ac862a0
https://git.kernel.org/stable/c/9e52ff544e0bfa09ee339fd7b0937ee3c080c24e
https://git.kernel.org/stable/c/aadc3bbea163b6caaaebfdd2b6c4667fbc726752 Patch
https://git.kernel.org/stable/c/ae267989b7b7933dfedcd26468d0a88fc3a9da9e
https://git.kernel.org/stable/c/b4e21431a0db4854b5023cd5af001be557e6c3db Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Nov 2025, 23:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

03 Nov 2025, 21:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html -

14 Dec 2024, 21:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/43e46ee5efc03990b223f7aa8b77aa9c3d3acfdf -
  • () https://git.kernel.org/stable/c/9e52ff544e0bfa09ee339fd7b0937ee3c080c24e -

02 Dec 2024, 08:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7ea9260874b779637aff6d24c344b8ef4ac862a0 -
  • () https://git.kernel.org/stable/c/ae267989b7b7933dfedcd26468d0a88fc3a9da9e -

01 Nov 2024, 16:52

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/6a488ad7745b8f64625c6d3a24ce7e448e83f11b - () https://git.kernel.org/stable/c/6a488ad7745b8f64625c6d3a24ce7e448e83f11b - Patch
References () https://git.kernel.org/stable/c/aadc3bbea163b6caaaebfdd2b6c4667fbc726752 - () https://git.kernel.org/stable/c/aadc3bbea163b6caaaebfdd2b6c4667fbc726752 - Patch
References () https://git.kernel.org/stable/c/b4e21431a0db4854b5023cd5af001be557e6c3db - () https://git.kernel.org/stable/c/b4e21431a0db4854b5023cd5af001be557e6c3db - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFSD: Limitar el número de operaciones de COPIA asíncronas concurrentes No parece que nada limite el número de operaciones de COPIA asíncronas concurrentes que los clientes pueden iniciar. Además, según tengo entendido, cada COPIA asíncrona puede copiar una cantidad ilimitada de fragmentos de 4 MB, por lo que puede ejecutarse durante mucho tiempo. Por lo tanto, en mi opinión, la COPIA asíncrona puede convertirse en un vector de denegación de servicio (DoS). Agregue un mecanismo de restricción que limite el número de operaciones de COPIA en segundo plano concurrentes. Comience de manera simple e intente ser justo: este parche implementa un límite por espacio de nombres. Una solicitud de COPIA asíncrona que se produce mientras se excede este límite obtiene NFS4ERR_DELAY. El cliente solicitante puede elegir enviar la solicitud nuevamente después de un retraso o volver a una copia de estilo de lectura/escritura tradicional. Si es necesario hacer que el mecanismo sea más sofisticado, podemos tratarlo en parches futuros.

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 18:15

Updated : 2025-11-03 23:16

NVD link : CVE-2024-49974

Mitre link : CVE-2024-49974

CVE.ORG link : CVE-2024-49974

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo