CVE-2024-53090

A flaw was found in the Linux kernel's AFS (Andrew File System) implementation. A local user could exploit this vulnerability to cause a Denial of Service (DoS) by triggering a system crash. The issue occurs during the handling of asynchronous requests when attempting to release a queued network call while an internal notification lock is already held, resulting in lock recursion and a kernel deadlock.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the in-kernel AFS module (kafs) from being loaded if Andrew File System functionality is not required.

1. Create a configuration file to disable module loading:

echo "install kafs /bin/true" > /etc/modprobe.d/disable-kafs.conf

2. Reboot warning and caveats: If the kafs module is already loaded in the running kernel, a system reboot is required for this configuration to take effect. Disabling this module prevents the system from mounting or accessing AFS network shares.