In the Linux kernel, the following vulnerability has been resolved:
NFSD: NFSv4 file creation neglects setting ACL
An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL (based on the mode bits) and not the ACL that was requested during file creation. This violates RFC 8881 section 6.4.1.3: "the ACL attribute is set as given".
The issue occurs in nfsd_create_setattr(), which calls nfsd_attrs_valid() to determine whether to call nfsd_setattr(). However, nfsd_attrs_valid() checks only for iattr changes and security labels, but not POSIX ACLs. When only an ACL is present, the function returns false, nfsd_setattr() is skipped, and the POSIX ACL is never applied to the inode.
Subsequently, when the client retrieves the ACL, the server finds no POSIX ACL on the inode and returns one generated from the file's mode bits rather than returning the originally-specified ACL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.248-247.988Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-5.15.201-140.219Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool6.12-debuginfoUpgrade kernel-debuginfoUpgrade bpftool6.12Upgrade kernel-headersUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel6.12Upgrade kernel6.12-modules-extra-commonUpgrade perfUpgrade kernel-livepatch-6.12.64-87.122Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-develUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-headersUpgrade kernel-livepatch-6.1.161-183.298 | Feb 20, 2026 | Jan 13, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 13, 2026 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-5.15.0-173-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-5.15.0-173-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.17.0-1013-azureUpgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-5.15.0-1103-aws-64kUpgrade linux-image-5.15.0-1094-intel-iot-realtimeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1095-kvmUpgrade linux-image-5.15.0-1097-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-6.17Upgrade linux-image-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1055-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1044-nvidia-tegra-igx-rtUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1020-oemUpgrade linux-image-5.15.0-1098-nvidiaUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-5.15.0-1044-nvidia-tegra-igxUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-ibm-5.15Upgrade linux-image-6.17.0-1012-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1055-nvidia-tegraUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-5.15.0-173-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-5.15.0-1103-aws-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-173-genericUpgrade linux-image-5.15.0-1086-gkeopUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-5.15.0-1100-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1103-awsUpgrade linux-image-aws-64kUpgrade linux-image-oem-6.17Upgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-raspi-6.17Upgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1103-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-aws-64k-6.17Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-oem-24.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-6.17Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-6.17.0-22-genericUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-6.17Upgrade linux-image-5.15.0-1102-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1098-nvidia-lowlatencyUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-5.15.0-1103-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1067-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-5.15.0-173-fipsUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-173-lowlatency-64kUpgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-64kUpgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1098-intel-iotgUpgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1099-gkeUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-realtime-6.17Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx | Mar 17, 2026 | Jan 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub