PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

kernel: nfsd: release layout stid on setlease failure

A use-after-free flaw was found in the Linux kernel's NFS daemon nfsd pNFS layout handling. When nfsd4layoutsetlease fails, the layout stateid that was already published in the client IDR is freed directly, leaving a stale pointer in the IDR. A subsequent IDR traversal, such as statesshow or clie...

kernel: nfsd: release layout stid on setlease failure

A use-after-free flaw was found in the Linux kernel's NFS daemon nfsd pNFS layout handling. When nfsd4layoutsetlease fails, the layout stateid that was already published in the client IDR is freed directly, leaving a stale pointer in the IDR. A subsequent IDR traversal, such as statesshow or clie...

kernel: nfsd: release layout stid on setlease failure

A use-after-free flaw was found in the Linux kernel's NFS daemon nfsd pNFS layout handling. When nfsd4layoutsetlease fails, the layout stateid that was already published in the client IDR is freed directly, leaving a stale pointer in the IDR. A subsequent IDR traversal, such as statesshow or clie...

kernel: nfsd: release layout stid on setlease failure

A use-after-free flaw was found in the Linux kernel's NFS daemon nfsd pNFS layout handling. When nfsd4layoutsetlease fails, the layout stateid that was already published in the client IDR is freed directly, leaving a stale pointer in the IDR. A subsequent IDR traversal, such as statesshow or clie...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098903 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into...

CVE-2026-53399

A use-after-free flaw was found in the Linux kernel's NFS daemon nfsd pNFS layout handling. When nfsd4layoutsetlease fails, the layout stateid that was already published in the client IDR is freed directly, leaving a stale pointer in the IDR. A subsequent IDR traversal, such as statesshow or clie...

nfsd: release layout stid on setlease failure

...

SUSE CVE-2026-53399

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

AZL-92576 CVE-2026-53399 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

CVE-2026-53399

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

CVE-2026-53399 nfsd: release layout stid on setlease failure

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

CVE-2026-53399

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

CVE-2026-53399

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

CVE-2026-53399 nfsd: release layout stid on setlease failure

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

EUVD-2026-45454

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to nfsd4alloclayoutstateid. When nfsd4layoutsetlease then fails, the error pat...

CVE-2026-53399

The CVE-2026-53399 issue affects the Linux kernel NFS server (nfsd) where nfs4_alloc_stid() publishes a new stid into cl_stateids with idr_alloc_cyclic under cl_lock, and if nfsd4_layout_setlease() fails, the teardown path frees the layout stateid directly via kmem_cache_free() without idr_remove...

Linux Distros Unpatched Vulnerability : CVE-2026-53399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into cl-clstateids via idralloccyclic under cllock before returning to...

PT-2026-61104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory management issue exists in the nfsd component. When nfsd4 layout setlease fails, the error path incorrectly frees the layout stateid using kmem cache free without calling idr...

SUSE CVE-2021-47506

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix use-after-free due to delegation race A delegation break could arrive as soon as we've called vfssetlease. A delegation break runs a callback which immediately in nfsd4cbrecallprepare adds the delegation to delrecalllru...