In the Linux kernel, the following vulnerability has been resolved:
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF.
Fix this by getting a reference early in the case where there is an extant confirmed client. If that fails then treat it as if there were no confirmed client found at all.
In the case where the unconfirmed client is expiring, just fail and return the result from get_client_locked().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-modulesUpgrade libperfUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-64kUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-tools-libs-devel | Dec 8, 2025 | Dec 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-5.15.191-132.213Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-livepatch-6.12.46-66.121Upgrade bpftool6.12-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extra-commonUpgrade perf6.12Upgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade bpftool6.12Upgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.150-174.273Upgrade python3-perfUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-toolsUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-libbpf-staticUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade kernel-develUpgrade python3-perf6.12-debuginfo | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 8, 2025 | Sep 4, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 2, 2025 | Sep 4, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade libperf-debuginfoUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade perf-debuginfoUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade perfUpgrade rtlaUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernelUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virt | Feb 5, 2026 | Dec 4, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade kernel-default-baseUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade dtb-renesasUpgrade dlm-kmp-64kb | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-aws-64kUpgrade linux-image-oem-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1044-ibm | Dec 5, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub