CVE-2026-53398 NFSD: Fix SECINFO_NO_NAME decode error cleanup

🗓️ 19 Jul 2026 12:01:59Reported by LinuxType

NFSD fix: initialize sin_exp before SECINFO_NO_NAME decode to avoid stale data after truncated XDR.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-53398	19 Jul 202612:01	–	attackerkb
CVE	CVE-2026-53398	19 Jul 202612:01	–	cve
EUVD	EUVD-2026-45520	19 Jul 202612:01	–	euvd
NVD	CVE-2026-53398	19 Jul 202612:16	–	nvd
OSV	CVE-2026-53398 NFSD: Fix SECINFO_NO_NAME decode error cleanup	19 Jul 202612:01	–	osv
OSV	DEBIAN-CVE-2026-53398	19 Jul 202612:16	–	osv
OSV	UBUNTU-CVE-2026-53398	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61103	19 Jul 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-53398	20 Jul 202614:17	–	redhatcve
SUSE CVE	SUSE CVE-2026-53398	19 Jul 202617:35	–	susecve

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/nfsd/nfs4xdr.c"
    ],
    "versions": [
      {
        "version": "5e76b25d7cc82c148d391c0c43b884e6427cb302",
        "lessThan": "8836405abdc53ca3dd5fc68b2cf6f8f012fad011",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "07b68ff5c71cf4ed5443016d8eb116863c0a4d88",
        "lessThan": "49de5d31dd8fdebf78bdeaf196b0ca5cd5c75439",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3fdc546462348b8a497c72bc894e0cde9f10fc40",
        "lessThan": "5ec37edcb534f3fc92304be236d37f08e6545585",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3fdc546462348b8a497c72bc894e0cde9f10fc40",
        "lessThan": "1e04be34cafae119e82bcaccd6d28a20f72a3647",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3fdc546462348b8a497c72bc894e0cde9f10fc40",
        "lessThan": "161d1aaeb04d620d3692639700512bb5038c1e10",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3fdc546462348b8a497c72bc894e0cde9f10fc40",
        "lessThan": "c8a24effd96d4779e2ad779654682304491c55a5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3fdc546462348b8a497c72bc894e0cde9f10fc40",
        "lessThan": "46eb17d45be69d28c7a23ea03283b207426a8232",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3fdc546462348b8a497c72bc894e0cde9f10fc40",
        "lessThan": "9e18e83b8846a5c3fe13fc8a464b4865d33996c6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5.10.220",
        "lessThan": "5.10.260",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "5.15.154",
        "lessThan": "5.15.211",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/nfsd/nfs4xdr.c"
    ],
    "versions": [
      {
        "version": "6.1",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.1",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.260",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.211",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.177",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.144",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.95",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.38",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.3",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/9e18e83b8846a5c3fe13fc8a464b4865d33996c6
git	www.git.kernel.org/stable/c/49de5d31dd8fdebf78bdeaf196b0ca5cd5c75439
git	www.git.kernel.org/stable/c/8836405abdc53ca3dd5fc68b2cf6f8f012fad011
git	www.git.kernel.org/stable/c/5ec37edcb534f3fc92304be236d37f08e6545585
git	www.git.kernel.org/stable/c/46eb17d45be69d28c7a23ea03283b207426a8232
git	www.git.kernel.org/stable/c/1e04be34cafae119e82bcaccd6d28a20f72a3647
git	www.git.kernel.org/stable/c/161d1aaeb04d620d3692639700512bb5038c1e10
git	www.git.kernel.org/stable/c/c8a24effd96d4779e2ad779654682304491c55a5

20 Jul 2026 13:40Current

CVSS 3.19.8

EPSS0.00177