In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP Jan Schunk reports… (CVE-2024-35882)
A memory leak vulnerability in the Linux kernel's SUNRPC implementation over TCP has been resolved. The issue causes slow server-side memory exhaustion on small NFS servers due to improper release of a record marker page fragment. This flaw was introduced by a specific commit that incorrectly assumed sock_sendmsg() releases all pages, which it does not. The vulnerability results in increased memory usage over time, potentially leading to denial of service. A narrow fix suitable for stable kernels is available, with a more comprehensive fix in development.
AI Analysis
Technical Summary
CVE-2024-35882 addresses a memory leak in the Linux kernel's SUNRPC subsystem when using RPC-over-TCP. The problem stems from a commit (e18e157bb5c8) that assumed sock_sendmsg() releases all pages in the bio_vec array, but the record marker page fragment remains unreleased. This causes slow memory exhaustion on server-side NFS implementations. The fix involves ensuring the proper release of this page fragment to prevent the leak. This is a resource exhaustion vulnerability classified under CWE-401 (Memory Leak).
Potential Impact
The vulnerability leads to slow memory exhaustion on affected Linux NFS servers using SUNRPC over TCP, potentially causing denial of service due to resource depletion. There is no impact on confidentiality or integrity. The CVSS v3.1 score is 5.5 (medium severity), reflecting local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact.
Mitigation Recommendations
A narrow fix addressing this memory leak has been applied and can be backported to stable Linux kernel versions. Users should apply the official kernel patches once available from their distribution or kernel maintainers. Since this is not a cloud service, remediation depends on applying these patches. Monitor vendor advisories for the more extensive fix currently in development.
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP Jan Schunk reports… (CVE-2024-35882)
Description
A memory leak vulnerability in the Linux kernel's SUNRPC implementation over TCP has been resolved. The issue causes slow server-side memory exhaustion on small NFS servers due to improper release of a record marker page fragment. This flaw was introduced by a specific commit that incorrectly assumed sock_sendmsg() releases all pages, which it does not. The vulnerability results in increased memory usage over time, potentially leading to denial of service. A narrow fix suitable for stable kernels is available, with a more comprehensive fix in development.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-35882 addresses a memory leak in the Linux kernel's SUNRPC subsystem when using RPC-over-TCP. The problem stems from a commit (e18e157bb5c8) that assumed sock_sendmsg() releases all pages in the bio_vec array, but the record marker page fragment remains unreleased. This causes slow memory exhaustion on server-side NFS implementations. The fix involves ensuring the proper release of this page fragment to prevent the leak. This is a resource exhaustion vulnerability classified under CWE-401 (Memory Leak).
Potential Impact
The vulnerability leads to slow memory exhaustion on affected Linux NFS servers using SUNRPC over TCP, potentially causing denial of service due to resource depletion. There is no impact on confidentiality or integrity. The CVSS v3.1 score is 5.5 (medium severity), reflecting local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact.
Mitigation Recommendations
A narrow fix addressing this memory leak has been applied and can be backported to stable Linux kernel versions. Users should apply the official kernel patches once available from their distribution or kernel maintainers. Since this is not a cloud service, remediation depends on applying these patches. Monitor vendor advisories for the more extensive fix currently in development.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-96rq-8hwj-wwwm
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2024-35882"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a71feebbf8831d539ff12dd
Added to database: 08/04/2026, 15:02:03 UTC
Last enriched: 08/04/2026, 15:18:41 UTC
Last updated: 08/04/2026, 15:21:07 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.