QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-53146

Back to search

CVE-2024-53146

Published: Dec 24, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value.

VendorProductVersions

Linux

Linux

affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 745f7ce5a95e783ba62fe774325829466aec2aa8
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 90adbae9dd158da8331d9fdd32077bd1af04f553
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 3c5f545c9a1f8a1869246f6f3ae8c17289d6a841
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 842f1c27a1aef5367e535f9e85c8c3b06352151a
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < de53c5305184ca1333b87e695d329d1502d694ce

+4 more versions

Linux

Linux

affected
2.6.12
unaffected
0 - < 2.6.12
unaffected
4.19.325 - <= 4.19.*
unaffected
5.4.287 - <= 5.4.*
unaffected
5.10.231 - <= 5.10.*

+6 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now