https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:15:07 +0000 https://vulnerability.circl.lu/vuln/cve-2024-46690 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease</p> <p>It is not safe to dereference fl-&gt;c.flc_owner without first confirming fl-&gt;fl_lmops is the expected manager. nfsd4_deleg_getattr_conflict() tests fl_lmops but largely ignores the result and assumes that flc_owner is an nfs4_delegation anyway. This is wrong.</p> <p>With this patch we restore the &#34;!= &amp;nfsd_lease_mng_ops&#34; case to behave as it did before the change mentioned below. This is the same as the current code, but without any reference to a possible delegation.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease</p> <p>It is not safe to dereference fl-&gt;c.flc_owner without first confirming fl-&gt;fl_lmops is the expected manager. nfsd4_deleg_getattr_conflict() tests fl_lmops but largely ignores the result and assumes that flc_owner is an nfs4_delegation anyway. This is wrong.</p> <p>With this patch we restore the &#34;!= &amp;nfsd_lease_mng_ops&#34; case to behave as it did before the change mentioned below. This is the same as the current code, but without any reference to a possible delegation.</p> https://vulnerability.circl.lu/vuln/cve-2024-46690