CVE-2024-50106

A vulnerability was found in the Linux kernel. This issue occurs due to a race condition between the laundromat thread handling revoking delegations and the free_stateid operation, leading to a use-after-free issue. The error occurs when a freed stateid is accessed by another operation, which can cause memory corruption.

This vulnerability is classified as moderate severity. While this issue can lead to a use-after-free condition, its impact is limited to a specific race between two operations: the laundromat thread and free_stateid. The issue requires precise timing between these operations to be triggered, which reduces the likelihood of exploitation under normal conditions. Additionally, the vulnerability does not directly expose the system to remote code execution or privilege escalation but instead risks memory corruption or unexpected behavior in NFS delegation handling.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.