PT-2026-90379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw exists in the nfsd copy-notify stateids. The issue occurs because free cpntf state locked only unlinks an entry when its reference count reaches zero. If a revoke...

PT-2026-96598

In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s2s cp stateids IDR and on their parent stid's sc cp list, pinned by a single membership reference. free cpntf state locked only...

PT-2026-90385

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A use-after-free issue exists in the nfsd4 copy notify function. The cpntf state was being initialized after nfs4 alloc init cpntf state had already linked it into the s2s cp stateids IDR an...

PT-2026-96333

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4 copy notify finished initializing the cpntf state after nfs4 alloc init cpntf state had already linked it into the s2s cp stateids IDR and the parent's sc cp list,...

CVE-2026-89694: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLOADCANCEL path clp != NULL, managecpntfstate freed the target cpntf state without checking ownership. The lookup key st-siopaque.soid is allocated...

The vulnerability of the _nfs42 ProcCopyNotify() function in the fs/nfs/nfs42proc.c module, which is part of the NFS client support in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nfs42 ProcCopyNotify function in the fs/nfs/nfs42proc.c module, which is part of the NFS client support in Linux kernel, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2025-201582

In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat if the stateid hasn't been used in a lease period. However, in case...

DEBIAN-CVE-2025-40273

In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat if the stateid hasn't been used in a lease period. However, in case...

SUSE CVE-2022-49103

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix reference count leaks in nfs42proccopynotify You don't often get email from [email protected]. Learn why this is important at http://aka.ms/LearnAboutSenderIdentification. The reference counting issue happens in...

UBUNTU-CVE-2022-49103

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix reference count leaks in nfs42proccopynotify You don't often get email from [email protected]. Learn why this is important at http://aka.ms/LearnAboutSenderIdentification. The reference counting issue happens in...

PT-2022-29307

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to reference count leaks in the nfs42 proc copy notify function in NFSv4.2. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29976

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to reference count leaks in the nfs42 proc copy notify function in NFSv4.2. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30265

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to reference count leaks in the nfs42 proc copy notify function in NFSv4.2. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29650

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A potential issue exists in the NFSv4.2 implementation, specifically in the nfs42 proc copy notify function, where reference count leaks may occur. The actual impact and attack plausibility o...

PT-2025-8031

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak issue was found in the Linux kernel's NFSv4.2 implementation, specifically in the nfs42 proc copy notify function. The issue occurs in two error paths where the...