1 matches found
kernel: nfsd: release layout stid on setlease failure
A use-after-free flaw was found in the Linux kernel's NFS daemon nfsd pNFS layout handling. When nfsd4layoutsetlease fails, the layout stateid that was already published in the client IDR is freed directly, leaving a stale pointer in the IDR. A subsequent IDR traversal, such as statesshow or clie...
9.8CVSS5.8AI score0.00543EPSS
SaveExploits0References5
20