CVE-2024-46696

A flaw was found in the nfsd component of the Linux kernel. This use-after-free (UAF) vulnerability occurs because fields embedded in a delegation reference are accessed after the reference has been dropped, making them unsafe. This could lead to a system crash or other unpredictable behavior.

This flaw has currently no known exploit.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If NFS server functionality is not required, disable the nfs-server service to prevent the nfsd kernel module from loading and exposing this vulnerability. To disable the service: sudo systemctl disable --now nfs-server This action will stop the NFS server and prevent it from starting automatically on boot. A system reboot may be required to fully unload the nfsd module if it was already in use. Disabling the NFS server will impact any services or clients relying on it.