In the Linux kernel, the following vulnerability has been resolved:
nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()
The pynfs DELEG8 test fails when run against nfsd. It acquires a delegation and then lets the lease time out. It then tries to use the deleg stateid and expects to see NFS4ERR_DELEG_REVOKED, but it gets bad NFS4ERR_BAD_STATEID instead.
When a delegation is revoked, it's initially marked with SC_STATUS_REVOKED, or SC_STATUS_ADMIN_REVOKED and later, it's marked with the SC_STATUS_FREEABLE flag, which denotes that it is waiting for s FREE_STATEID call.
nfs4_lookup_stateid() accepts a statusmask that includes the status flags that a found stateid is allowed to have. Currently, that mask never includes SC_STATUS_FREEABLE, which means that revoked delegations are (almost) never found.
Add SC_STATUS_FREEABLE to the always-allowed status flags, and remove it from nfsd4_delegreturn() since it's now always implied.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.23-29.97Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-static | Aug 5, 2025 | Apr 18, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-64kb-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azureUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-azure-fde-edgeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-azure-fde-6.11Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-azure-6.11Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-6.11Upgrade linux-image-lowlatency-64k-hwe-24.04 | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub