CVE-2024-49999

A flaw was found in the Linux kernel's AFS (Andrew File System) module. This vulnerability occurs in the afs_wait_for_operation() function, where the op->server pointer is not properly validated for NULL before being used. A local attacker with low privileges could exploit this flaw, leading to a system crash and resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the afs kernel module from loading. Create a file named /etc/modprobe.d/disable-afs.conf with the following content: install afs /bin/true. A system reboot is required for this change to take effect. This mitigation will prevent the use of the AFS filesystem.