In the Linux kernel, the following vulnerability has been resolved:
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF.
Fix this by getting a reference early in the case where there is an extant confirmed client. If that fails then treat it as if there were no confirmed client found at all.
In the case where the unconfirmed client is expiring, just fail and return the result from get_client_locked().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade rvUpgrade kernel-64k-debug-develUpgrade perfUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64kUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-64k-modulesUpgrade libperfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modules-coreUpgrade bpftoolUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-rt-64k-develUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-headersUpgrade kernel-rt-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matched | Dec 8, 2025 | Dec 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade perfUpgrade kernel6.12-headersUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel6.12-develUpgrade python3-perf6.12-debuginfoUpgrade bpftoolUpgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel-toolsUpgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel-headersUpgrade kernel6.12-modules-extraUpgrade bpftool6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-6.12.46-66.121Upgrade perf6.12Upgrade bpftool6.12-debuginfoUpgrade kernel-tools-debuginfo | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 8, 2025 | Sep 4, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 2, 2025 | Sep 4, 2025 |
| Rocky_linux | — | Upgrade rtlaUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modules-coreUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-coreUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules | Feb 5, 2026 | Dec 4, 2025 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-5.15Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-xilinxUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-azure-fips-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-kvmUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1049-nvidia-tegra-rt | Dec 5, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub