https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:08:34 +0000 https://cve.radiocsirt.org/vuln/cve-2024-50121 <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net</p> <p>In the normal case, when we excute `echo 0 &gt; /proc/fs/nfsd/threads`, the function `nfs4_state_destroy_net` in `nfs4_state_shutdown_net` will release all resources related to the hashed `nfs4_client`. If the `nfsd_client_shrinker` is running concurrently, the `expire_client` function will first unhash this client and then destroy it. This can lead to the following warning. Additionally, numerous use-after-free errors may occur as well.</p> <p>nfsd_client_shrinker echo 0 &gt; /proc/fs/nfsd/threads</p> <p>expire_client nfsd_shutdown_net unhash_client ... nfs4_state_shutdown_net /* won&#39;t wait shrinker exit */ /* cancel_work(&amp;nn-&gt;nfsd_shrinker_work) * nfsd_file for this /* won&#39;t destroy unhashed client1 */ * client1 still alive nfs4_state_destroy_net */</p> <p>nfsd_file_cache_shutdown /* trigger warning */ kmem_cache_destroy(nfsd_file_slab) kmem_cache_destroy(nfsd_file_mark_slab) /* release nfsd_file and mark */ __destroy_client</p> <p>==================================================================== BUG nfsd_file (Not tainted): Objects remaining in nfsd_file on __kmem_cac…</p> <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net</p> <p>In the normal case, when we excute `echo 0 &gt; /proc/fs/nfsd/threads`, the function `nfs4_state_destroy_net` in `nfs4_state_shutdown_net` will release all resources related to the hashed `nfs4_client`. If the `nfsd_client_shrinker` is running concurrently, the `expire_client` function will first unhash this client and then destroy it. This can lead to the following warning. Additionally, numerous use-after-free errors may occur as well.</p> <p>nfsd_client_shrinker echo 0 &gt; /proc/fs/nfsd/threads</p> <p>expire_client nfsd_shutdown_net unhash_client ... nfs4_state_shutdown_net /* won&#39;t wait shrinker exit */ /* cancel_work(&amp;nn-&gt;nfsd_shrinker_work) * nfsd_file for this /* won&#39;t destroy unhashed client1 */ * client1 still alive nfs4_state_destroy_net */</p> <p>nfsd_file_cache_shutdown /* trigger warning */ kmem_cache_destroy(nfsd_file_slab) kmem_cache_destroy(nfsd_file_mark_slab) /* release nfsd_file and mark */ __destroy_client</p> <p>==================================================================== BUG nfsd_file (Not tainted): Objects remaining in nfsd_file on __kmem_cac…</p> https://cve.radiocsirt.org/vuln/cve-2024-50121