In the Linux kernel, the following vulnerability has been resolved:
lockd: set other missing fields when unlocking files
vfs_lock_file() expects the struct file_lock to be fully initialised by the caller. Re-exported NFSv3 has been seen to Oops if the fl_file field is NULL.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linuxUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-gkeopUpgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-realtimeUpgrade linux-azure-fdeUpgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-gcpUpgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-gcp-5.15 | Sep 19, 2025 | Sep 16, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub