CVE-2024-47737

A flaw was found in the Linux kernel's Network File System Daemon (nfsd) component. This vulnerability occurs when the system attempts to allocate buffer space but fails, yet a related lookup operation succeeds. This leads to a resource leak where a cache entry is acquired but not properly released. A local attacker could exploit this issue to cause a Denial of Service (DoS) by exhausting system resources.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If NFS server functionality is not required, disable the nfs-server service to prevent exploitation.

systemctl disable --now nfs-server

If the NFS server is necessary, restrict access to trusted clients using firewall rules. Restarting the nfs-server service may be required for changes to take effect.