CVE-2025-40326

CVE-2025-40326 concerns the Linux kernel NFSD handling of the new time_deleg FATTR4 attributes. The vulnerability arises because NFSv4 clients may query these attributes via GETATTR, but RFC guidance indicates these attributes are invalid for GETATTR and should only be used with CB_GETATTR/SETATT...