CVE-2024-50046

A flaw was found in the Linux kernel's NFSv4 component. A local user, when copying files on an NFS client's mountpoint to another location on the same NFS server, can trigger a null-pointer dereference. This vulnerability can lead to a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If NFSv4 client functionality is not required, the nfsv4 kernel module can be blacklisted to prevent it from loading. Create a file /etc/modprobe.d/disable-nfsv4.conf with the content blacklist nfsv4. A system reboot is required for this change to take effect. Disabling this module will impact systems that rely on NFSv4 client operations.