kernel: nfsd: fix posix_acl leak on SETACL decode failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability occurs during the processing of Access Control List ACL set operations. If a specific decode step fails, a memory leak of a posixacl object occurs. This can lead to resource exhaustion over time, potentiall...

kernel: nfsd: release layout stid on setlease failure

A use-after-free flaw was found in the Linux kernel's NFS daemon nfsd pNFS layout handling. When nfsd4layoutsetlease fails, the layout stateid that was already published in the client IDR is freed directly, leaving a stale pointer in the IDR. A subsequent IDR traversal, such as statesshow or clie...

kernel: nfsd: fix posix_acl leak on SETACL decode failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability occurs during the processing of Access Control List ACL set operations. If a specific decode step fails, a memory leak of a posixacl object occurs. This can lead to resource exhaustion over time, potentiall...

kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg

A flaw was found in the Linux kernel's Network File System Daemon NFSD. An issue with file access counting in the nfsd4addrdaccesstowrdeleg function can lead to an extra access count for nfs4file objects. This prevents the proper freeing of associated resources when the NFS server service is...

kernel: nfsd: release layout stid on setlease failure

A use-after-free flaw was found in the Linux kernel's NFS daemon nfsd pNFS layout handling. When nfsd4layoutsetlease fails, the layout stateid that was already published in the client IDR is freed directly, leaving a stale pointer in the IDR. A subsequent IDR traversal, such as statesshow or clie...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001403 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: make sure exp active before svcexportshow The function eshow was called with protection fro...

SUSE CVE-2026-74316

In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4droprevokedstid nfsd4droprevokedstid has no SCTYPELAYOUT case, so when a client sends FREESTATEID for an admin-revoked layout stid, the default branch releases cllock and returns without unhashing...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098903 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098710 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and exportsproc As of now nfsd calls...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098906 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinex...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-113)

The version of kernel installed on the remote host is prior to 5.15.213-150.251. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-113 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: NFSD: Handling of layout stids in nfsd4 DropRevokedStid The nfsd4DropRevokedStid function does not have a SCTYPELAYOUT case. Therefore, when a client sends FREESTATEID for an admin-revoked layout stid, the default branch releases...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: NFSD: Fixed a potential use-after-free in nfsdfileput The nfsdfileputnoref function can free the @nf object; therefore, do not dereference @nf immediately after returning from nfsdfileputnoref...

nfsd DoS

The vulnerability of the nfsd component in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-74316

A flaw was found in the Linux kernel's Network File System Daemon NFSD component. When a client sends a request to free an admin-revoked layout state ID, the system fails to properly release the associated resources. This oversight can lead to a resource leak, potentially allowing a remote attack...

Linux Distros Unpatched Vulnerability : CVE-2026-74316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4droprevokedstid nfsd4droprevokedstid has no SCTYPELAYOUT...

nfsd kernel module DoS

The vulnerability of the nfsd module in Linux operating systems is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow attackers to cause service failures...

Nfsd Kernel Module Heap Buffer Overflow DoS

The vulnerability of the nfsdnlthreadssetdoit function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100565 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak on SETACL decode failure nfsaclsvcdecodesetaclargs and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099981)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099981 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix RELEASELOCKOWNER The test on socount in nfsd4releaselockowner is nonsense and harmful...