In the Linux kernel, the following vulnerability has been resolved:
NFSv4: Fix a deadlock when recovering state on a sillyrenamed file
If the file is sillyrenamed, and slated for delete on close, it is possible for a server reboot to triggeer an open reclaim, with can again race with the application call to close(). When that happens, the call to put_nfs_open_context() can trigger a synchronous delegreturn call which deadlocks because it is not marked as privileged.
Instead, ensure that the call to nfs4_inode_return_delegation_on_close() catches the delegreturn, and schedules it asynchronously.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-default | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1015-azure | May 21, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub