In the Linux kernel, the following vulnerability has been resolved:
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF.
Fix this by getting a reference early in the case where there is an extant confirmed client. If that fails then treat it as if there were no confirmed client found at all.
In the case where the unconfirmed client is expiring, just fail and return the result from get_client_locked().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-docUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-modulesUpgrade perfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade rvUpgrade kernel-64k-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-develUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel | Dec 8, 2025 | Dec 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.191-132.213Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernelUpgrade kernel6.12-tools-develUpgrade kernel6.12Upgrade perf6.12Upgrade bpftool6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.12.46-66.121Upgrade bpftool6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-headersUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-toolsUpgrade perf6.12-debuginfo | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 8, 2025 | Sep 4, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 2, 2025 | Sep 4, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade rtlaUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-core | Feb 5, 2026 | Dec 4, 2025 |
| Suse | — | Upgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade dtb-lgUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-obs-build | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-azureUpgrade linux-image-raspi-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-gke-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-intelUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-xilinxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-generic-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-nvidia-lowlatency | Dec 5, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub