In the Linux kernel, the following vulnerability has been resolved:
NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg
In nfsd4_add_rdaccess_to_wrdeleg, if fp->fi_fds[O_RDONLY] is already set by another thread, __nfs4_file_get_access should not be called to increment the nfs4_file access count since that was already done by the thread that added READ access to the file. The extra fi_access count in nfs4_file can prevent the corresponding nfsd_file from being freed.
When stopping nfs-server service, these extra access counts trigger a BUG in kmem_cache_destroy() that shows nfsd_file object remaining on __kmem_cache_shutdown.
This problem can be reproduced by running the Git project's test suite over NFS.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel-livepatch-6.18.33-63.124Upgrade bpftool6.18Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-toolsUpgrade python3-perf6.18Upgrade perf6.18Upgrade kernel6.18-modules-extraUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-modules-extra-commonUpgrade python3-perf6.18-debuginfo | Jul 8, 2026 | Jun 24, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 3, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernelUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade perfUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade libperf-debuginfo | Sep 7, 2026 | Sep 2, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-ibmUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-azure-fde-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-genericUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-gcpUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-oem-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-azure-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-realtime-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-realtime-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-bosUpgrade linux-image-oem-24.04dUpgrade linux-image-oem-26.04Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-2016-nvidia-bos | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub