CVE-2024-49974

A flaw was found in the Linux kernel's Network File System Daemon (NFSD). An attacker can exploit this by initiating an unlimited number of concurrent asynchronous copy operations. This can lead to resource exhaustion and a Denial of Service (DoS) condition, making the system unresponsive to legitimate requests.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, restrict access to the NFS service to trusted clients and networks using firewall rules. If the NFS service is not required, disable it to prevent exploitation. To disable the NFS server: sudo systemctl stop nfs-server sudo systemctl disable nfs-server Note that disabling the NFS server will prevent all NFS shares from being accessible.