Answer in brief
CVE-2024-46690 records a Critical severity (CVSS 9.8) vulnerability in nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 9.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c5967721e1063648b0506481585ba7e2e49a075e <1b46a871e980e3daa16fd5e77539966492e8910a || >=c5967721e1063648b0506481585ba7e2e49a075e <40927f3d0972bf86357a32a5749be71a551241b6 | 1b46a871e980e3daa16fd5e77539966492e8910a, 40927f3d0972bf86357a32a5749be71a551241b6 |
| Linux/Linuxgeneric | 6.9 | Not reported |
Published upstream
Sep 13, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease It is not safe to dereference fl->c.flc_owner without first confirming fl->fl_lmops is the expected manager. nfsd4_deleg_getattr_conflict() tests fl_lmops but largely ignores the result and assumes that flc_owner is an nfs4_delegation anyway. This is wrong. With this patch we restore the "!= &nfsd_lease_mng_ops" case to behave as it did before the change mentioned below. This is the same as the current code, but without any reference to a possible delegation.
Quoted source text, attributed separately from HOL analysis.