CVE-2024-47737

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: call cache_put if xdr_reserve_space returns NULL

If not enough buffer space available, but idmap_lookup has triggered lookup_fn which calls cache_get and returns successfully. Then we missed to call cache_put here which pairs with cache_get.

Reviwed-by: Jeff Layton <jlayton@kernel.org>

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < 3e8081ebff12bec1347deaceb6bce0765cce54df; >= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < c6b16e700cf4d959af524bd9d3978407ff7ce462; >= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < 9f03f0016ff797932551881c7e06ae50e9c39134; >= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < 9803ab882d565a8fb2dde5999d98866d1c499dfd; >= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < 81821617312988096f5deccf0f7da6f888e98056; >= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < a1afbbb5276f943ad7173d0b4c626b8c75a260da; >= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < e32ee6a61041925d1a05c14d10352dcfce9ef029; >= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < 8d0765f86135e27f0bb5c950c136495719b4c834; >= ddd1ea56367202f6c99135cd59de7a97af4c4ffd, < d078cbf5c38de83bc31f83c47dcd2184c04a50c7
LinuxLinux3.16
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Oct 21, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-477383.3In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the CVE-2024-477395.5In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to prevent deadlock on seq_nr overflow CVE-2024-47746.5The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data memCVE-2024-477405.5In the Linux kernel, the following vulnerability has been resolved: f2fs: Require FMODE_WRITE for atomic write ioctls The F2FS ioctls for CVE-2024-477417.0In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race setting file private on concurrent lseek using same fd CVE-2024-477427.8In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firmware names are hardcodeCVE-2024-477435.5In the Linux kernel, the following vulnerability has been resolved: KEYS: prevent NULL pointer dereference in find_asymmetric_key() In finCVE-2024-477445.5In the Linux kernel, the following vulnerability has been resolved: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock CVE-2024-477457.8In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The rCVE-2024-477465.5In the Linux kernel, the following vulnerability has been resolved: fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set This may be CVE-2024-477477.0In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to RacCVE-2024-477487.8In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: assign irq bypass producer token correctly We used to call