CVE-2026-53399

The CVE-2026-53399 issue affects the Linux kernel NFS server (nfsd) where nfs4_alloc_stid() publishes a new stid into cl_stateids with idr_alloc_cyclic under cl_lock, and if nfsd4_layout_setlease() fails, the teardown path frees the layout stateid directly via kmem_cache_free() without idr_remove...

PT-2024-33884

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises when multiple FREE STATEIDs are sent for the same delegation stateid, potentially leading to use-after-free or counter refcount underflow errors. This occurs because t...