CVE-2024-46690

A flaw was found in the Linux kernel's Network File System Daemon (nfsd) component. An issue in the nfsd4_deleg_getattr_conflict function, specifically related to handling third-party leases, allows for unsafe dereferencing of a pointer. This could lead to a local attacker causing a denial of service (DoS) by triggering an unexpected state in the kernel.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, disable the NFS server service if it is not required. This can be achieved by stopping and disabling the nfs-server service.

# systemctl stop nfs-server.service
# systemctl disable nfs-server.service

Disabling the NFS server will prevent clients from accessing exported NFS shares. A system reboot may be required for the changes to take full effect.