CVE: CVE-2024-50046
Published: 2024-10-21
Description: In the Linux kernel, the following vulnerability has been resolved:

NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()

On the node of an NFS client, some files saved in the mountpoint of the
NFS server were copied to another location of the same NFS server.
Accidentally, the nfs42_complete_copies() got a NULL-pointer dereference
crash with the following syslog:

[[PII_REDACTED]81] NFSv4: state recovery failed for open file nfs/pvc-12b5200d-cd0f-46a3-b9f0-af8f4fe0ef64.qcow2, error = -116
[[PII_REDACTED]60] NFSv4: state recovery failed for open file nfs/pvc-12b5200d-cd0f-46a3-b9f0-af8f4fe0ef64.qcow2, error = -116
[[PII_REDACTED]83] Unable to handle kernel NULL pointer dereference at virtual address [PII_REDACTED]
[[PII_REDACTED]86] Mem abort info:
[[PII_REDACTED]01]   ESR = 0x[PII_REDACTED]000007
[[PII_REDACTED]62]   EC = 0x25: DABT (current EL), IL = 32 bits
[[PII_REDACTED]84]   SET = 0, FnV = 0
[[PII_REDACTED]16]   EA = 0, S1PTW = 0
[[PII_REDACTED]40]   FSC = 0x07: level 3 translation fault
[[PII_REDACTED]59] Data abort info:
[[PII_REDACTED]83]   ISV = 0, ISS = 0x00000007
[[PII_REDACTED]42]   CM = 0, WnR = 0
[[PII_REDACTED]67] user pgtable: 64k pages, 48-bit VAs, pgdp=[PII_REDACTED]6ff400
[[PII_REDACTED]31] [[PII_REDACTED]] pgd=08001100ae100003, p4d=08001100ae100003, pud=08001100ae100003, pmd=08001100b3c00003, pte=[PII_REDACTED]
[[PII_REDACTED]57] Internal error: Oops: 96000007 [#1] SMP
[[PII_REDACTED]58] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache netfs ocfs2_dlmfs ocfs2_stack_o2cb ocfs2_dlm vhost_net vhost vhost_iotlb tap tun ipt_rpfilter xt_multiport ip_set_hash_ip ip_set_hash_net xfrm_interface xfrm6_tunnel tunnel4 tunnel6 esp4 ah4 wireguard libcurve25519_generic veth xt_addrtype xt_set nf_conntrack_netlink ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_bitmap_port ip_set_hash_ipport dummy ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs iptable_filter sch_ingress nfnetlink_cttimeout vport_gre ip_gre ip_tunnel gre vport_geneve geneve vport_vxlan vxlan ip6_udp_tunnel udp_tunnel openvswitch nf_conncount dm_round_robin dm_service_time dm_multipath xt_nat xt_MASQUERADE nft_chain_nat nf_nat xt_mark xt_conntrack xt_comment nft_compat nft_counter nf_tables nfnetlink ocfs2 ocfs2_nodemanager ocfs2_stackglue iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi ipmi_ssif nbd overlay 8021q garp mrp bonding tls rfkill sunrpc ext4 mbcache jbd2
[[PII_REDACTED]52]  vfat fat cas_cache cas_disk ses enclosure scsi_transport_sas sg acpi_ipmi ipmi_si ipmi_devintf ipmi_msghandler ip_tables vfio_pci vfio_pci_core vfio_virqfd vfio_iommu_type1 vfio dm_mirror dm_region_hash dm_log dm_mod nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 br_netfilter bridge stp llc fuse xfs libcrc32c ast drm_vram_helper qla2xxx drm_kms_helper syscopyarea crct10dif_ce sysfillrect ghash_ce sysimgblt sha2_ce fb_sys_fops cec sha256_arm64 sha1_ce drm_ttm_helper ttm nvme_fc igb sbsa_gwdt nvme_fabrics drm nvme_core i2c_algo_bit i40e scsi_transport_fc megaraid_sas aes_neon_bs
[[PII_REDACTED]53] CPU: 6 PID: 4124696 Comm: 10.253.166.125- Kdump: loaded Not tainted 5.15.131-9.cl9_ocfs2.aarch64 #1
[[PII_REDACTED]56] Hardware name: Great Wall .\x93\x8e...RF6260 V5/GWMSSE2GL1T, BIOS T656FBE_V3.0.18 2024-01-06
[[PII_REDACTED]21] pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[[PII_REDACTED]34] pc : nfs4_reclaim_open_state+0x220/0x800 [nfsv4]
[[PII_REDACTED]27] lr : nfs4_reclaim_open_state+0x12c/0x800 [nfsv4]
[[PII_REDACTED]95] sp : ffff8000f568fc70
[[PII_REDACTED]31] x29: ffff8000f568fc70 x28: [PII_REDACTED] x27: ffff21003db33000
[[PII_REDACTED]30] x26: ffff800005521ae0 x25: ffff0100f98fa3f0 x24: [PII_REDACTED]
[[PII_REDACTED]19] x23: ffff[PII_REDACTED]08 x22: ffff21003db33040 x21: ffff21003db33050
[[PII_REDACTED]28] x20: ffff410172fe9e40 x19: ffff410172fe9e00 x18: [PII_REDACTED]
[[PII_REDACTED]14] x17: [PII_REDACTED] x16: [PII_REDACTED] x15: [PII_REDACTED]
[[PII_REDACTED]95] x14: [PII_REDACTED] x13: ffff800008e685a8 x12: 00000000eac0c6e6
[[PII_REDACTED]98] x11:[PII_REDACTED]0000
---truncated---
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/584c019baedddec3fd634053e8fb2d8836108d38; https://git.kernel.org/stable/c/632344b9efa064ca737bfcdaaaced59fd5f18ae9; https://git.kernel.org/stable/c/a848c29e3486189aaabd5663bc11aea50c5bd144