CVE-2024-46780
kernel: nilfs2: protect references to superblock parameters exposed in sysfs
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 18, 2024
Updated · September 13, 2026
Description
A flaw was found in the Linux kernel's nilfs2 filesystem. A local attacker with low privileges could exploit this vulnerability by reading the superblock buffer without proper mutual exclusion. This can lead to issues with pointer dereferencing and memory access, ultimately resulting in a system crash and Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')