CVE-2024-53066

A flaw was found in the Linux kernel's NFS (Network File System) implementation. When querying file attributes, the kernel fails to properly initialize internal attribute data structures before parsing server responses. A local user can exploit this flaw by interacting with files on an NFS mount, triggering an uninitialized memory access that may lead to a kernel crash and a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce exposure on systems where NFS file sharing is not required, prevent autoloading of the NFS client kernel modules:

1. Create a configuration file in /etc/modprobe.d/ to disable loading of the modules:

echo "install nfs /bin/true" > /etc/modprobe.d/disable-nfs.conf

echo "install nfsv4 /bin/true" >> /etc/modprobe.d/disable-nfs.conf

2. If the modules are currently loaded in the running kernel, attempt to unload them:

modprobe -r nfsv4 nfs

Caveats: Blacklisting these modules prevents the system from mounting NFS shares. If filesystems are actively mounted or services are utilizing NFS, a system reboot will be required for the configuration to take effect.