Is CVE-2024-46697 actively exploited?

CVE-2024-46697 has no public evidence of in-the-wild exploitation as of 2024-09-19.

What is the CVSS score for CVE-2024-46697?

CVE-2024-46697 has a CVSS score of 5.5 (MEDIUM severity). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

How do I patch CVE-2024-46697?

Patch guidance is available from linux security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2024-46697.

CVE-2024-46697 - remediation guidance & executive summary

Q: Which products are affected by CVE-2024-46697?

6 products: linux linux kernel, linux linux kernel, linux linux kernel, linux linux kernel, linux linux kernel, and 1 more.

Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that nfsd4_fattr_args.context is zeroed out If nfsd4_encode_fattr4 ends up doing a "goto out" before we get to checking for the security label, then args.context will be set to uninitialized junk on the stack, which we'll then try to free. Initialize it early.

CVSS Metrics

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector: local
Complexity: low
Privileges: low
User Action: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
Weaknesses: CWE-665

Metadata

Primary Vendor: LINUX
Published: 9/13/2024
Last Modified: 9/19/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

linux : linux_kernellinux : linux_kernellinux : linux_kernellinux : linux_kernellinux : linux_kernellinux : linux_kernel

Remediation Guidance

Executive Summary

View on NIST NVD