In the Linux kernel, the following vulnerability has been resolved:
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF.
Fix this by getting a reference early in the case where there is an extant confirmed client. If that fails then treat it as if there were no confirmed client found at all.
In the case where the unconfirmed client is expiring, just fail and return the result from get_client_locked().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade rvUpgrade kernel-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-64kUpgrade kernel-rt-debug-modules-coreUpgrade python3-perfUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-extraUpgrade libperfUpgrade kernel-64k-develUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64kUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-develUpgrade kernelUpgrade kernel-rt-64k-modules-coreUpgrade bpftoolUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-core | Dec 8, 2025 | Dec 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12Upgrade kernel6.12-toolsUpgrade perf6.12Upgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-develUpgrade perfUpgrade kernel6.12-libbpf-staticUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfo | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 8, 2025 | Sep 4, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 2, 2025 | Sep 4, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvmUpgrade perfUpgrade rtlaUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade bpftool-debuginfoUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt | Feb 5, 2026 | Dec 4, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-azureUpgrade kernel-64kbUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-allwinner | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-4.15.0-1190-gcpUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-gke-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-4.15.0-2098-gcp-fipsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-azure-fipsUpgrade linux-image-4.15.0-260-lowlatencyUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-virtual-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-4.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-oemUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-4.15.0-260-genericUpgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-4.15.0-1197-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-gcp-4.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-4.15.0-1179-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-22.04 | Dec 5, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub