In the Linux kernel, the following vulnerability has been resolved:
lockd: set other missing fields when unlocking files
vfs_lock_file() expects the struct file_lock to be fully initialised by the caller. Re-exported NFSv3 has been seen to Oops if the fl_file field is NULL.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-lowlatency-hwe-5.15Upgrade linux-azureUpgrade linux-gkeUpgrade linux-gcpUpgrade linux-realtimeUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linux-bluefieldUpgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linuxUpgrade linux-oracle-5.15Upgrade linux-riscv-5.15Upgrade linux-ibmUpgrade linux-lowlatency | Sep 19, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub