In the Linux kernel, the following vulnerability has been resolved:
nfsd: decrease sc_count directly if fail to queue dl_recall
A deadlock warning occurred when invoking nfs4_put_stid following a failed dl_recall queue operation: T1 T2 nfs4_laundromat nfs4_get_client_reaplist nfs4_anylock_blockers __break_lease spin_lock // ctx->flc_lock spin_lock // clp->cl_lock nfs4_lockowner_has_blockers locks_owner_has_blockers spin_lock // flctx->flc_lock nfsd_break_deleg_cb nfsd_break_one_deleg nfs4_put_stid refcount_dec_and_lock spin_lock // clp->cl_lock
When a file is opened, an nfs4_delegation is allocated with sc_count initialized to 1, and the file_lease holds a reference to the delegation. The file_lease is then associated with the file through kernel_setlease.
The disassociation is performed in nfsd4_delegreturn via the following call chain: nfsd4_delegreturn --> destroy_delegation --> destroy_unhashed_deleg --> nfs4_unlock_deleg_lease --> kernel_setlease --> generic_delete_lease The corresponding sc_count reference will be released after this disassociation.
Since nfsd_break_one_deleg executes while holding the flc_lock, the disassociation process becomes blocked when attempting to acquire flc_lock in generic_delete_lease. This means: 1) sc_count in nfsd_break_one_deleg will not be decremented to 0; 2) The nfs4_put_stid called by nfsd_break_one_deleg will not attempt to acquire cl_lock; 3) Consequently, no deadlock condition is created.
Given that sc_count in nfsd_break_one_deleg remains non-zero, we can safely perform refcount_dec on sc_count directly. This approach effectively avoids triggering deadlock warnings.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernelUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perf6.12-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade perfUpgrade kernel-livepatch-6.1.140-154.222Upgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 12, 2025 | May 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azure | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-fips-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibm-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-genericUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-5.15Upgrade linux-image-kvmUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-gke-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-generic-64k-5.15 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub