CVE-2024-46697

A flaw was found in the Linux kernel's nfsd component. A local attacker with low privileges could exploit a vulnerability where uninitialized stack data is improperly freed. This issue can lead to a system crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If the NFS server functionality is not required, disable the nfs-server service to mitigate this vulnerability. This can be achieved by running the following commands:

sudo systemctl stop nfs-server
sudo systemctl disable nfs-server

Disabling the nfs-server service will prevent NFS clients from accessing shared directories on the system and may impact services relying on NFS. A system reboot may be required for the changes to take full effect.