Memory Corruption Issue in Linux Kernel NFSv3 LocalIO

CVE-2024-56740

Summary

The vulnerability in the Linux kernel arises when the NFSv3 LOCALIO functionality does not properly clear the res.replen variable in the nfs_local_read_done function. Failure to address this leads to memory corruption, where remnants of obsolete data may persist, resulting in critical errors during read operations. This issue becomes manifest during a transition from LOCALIO to standard RPC calls under heavy I/O loads, such as when the NFSv3 server experiences interruptions. The mishandling of memory locations creates pathways for erroneous data placement, compromising data integrity and operational stability.

References