CVE-2024-50241

A flaw was found in the Linux kernel's Network File System Daemon (NFSD) component. This vulnerability occurs due to the struct nfsd4_copy not being properly initialized, specifically its reference count (refcount) and asynchronous copies (async_copies) fields. An error during the nfsd4_copy() operation can lead to a reference count underflow, which may result in a system crash or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If NFS server functionality is not required, disable the nfs-server service to prevent exploitation. This action will stop the NFS daemon and prevent it from starting automatically on subsequent reboots.

systemctl disable --now nfs-server

Disabling the nfs-server service will prevent the system from exporting NFS shares, which may impact dependent services or clients.