Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-10934 EUVD-2024-33357GHSA-cx22-p4ff-962q

OpenBSD NFS double-free vulnerability

Published Nov 15, 2024 · Updated Oct 2, 2025 · Assigned by cisa-cg

Description

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021,
avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.

Affected products

VendorProductAffectedFixed
OpenBSD OpenBSD 7.5, 7.4 —

Advisories 1

References