CVE-2024-57928

A flaw was found in the Linux kernel's network filesystem (netfs) subsystem. This flaw allows a local user to cause a Denial of Service (DoS) due to improper error handling during buffered read operations. When the kernel encounters memory allocation errors during read preparation, it fails to cancel subrequests and decrement outstanding request counters. This incomplete cleanup can cause read operations to hang, destabilizing the system.

This vulnerability is rated as having Low severity because triggering it requires transient memory allocation failures during network-backed file reads by a local user. An attacker cannot easily force out-of-memory conditions deterministically, significantly limiting reproducibility and practical exploitability. Additionally, older production releases such as Red Hat Enterprise Linux 8 and 9 lack the affected upstream changes, further constraining overall enterprise exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.