In the Linux kernel, the following vulnerability has been resolved:
NFSD: NFSv4 file creation neglects setting ACL
An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL (based on the mode bits) and not the ACL that was requested during file creation. This violates RFC 8881 section 6.4.1.3: "the ACL attribute is set as given".
The issue occurs in nfsd_create_setattr(), which calls nfsd_attrs_valid() to determine whether to call nfsd_setattr(). However, nfsd_attrs_valid() checks only for iattr changes and security labels, but not POSIX ACLs. When only an ACL is present, the function returns false, nfsd_setattr() is skipped, and the POSIX ACL is never applied to the inode.
Subsequently, when the client retrieves the ACL, the server finds no POSIX ACL on the inode and returns one generated from the file's mode bits rather than returning the originally-specified ACL.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.201-140.219Upgrade bpftool-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.248-247.988Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpfUpgrade perf6.12Upgrade python3-perfUpgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.1.161-183.298Upgrade kernel6.12-headersUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel6.12-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.64-87.122Upgrade perfUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade bpftool6.12Upgrade kernel-tools-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade perf-debuginfoUpgrade bpftool-debuginfo | Feb 20, 2026 | Jan 13, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 13, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-realtime-6.17Upgrade linux-image-5.15.0-173-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-5.15.0-1098-nvidia-lowlatencyUpgrade linux-image-gcp-6.17Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.17.0-22-genericUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-oem-24.04dUpgrade linux-image-virtual-6.17Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1103-gcp-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-fips-6.8Upgrade linux-image-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1067-xilinx-zynqmpUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-173-lowlatency-64kUpgrade linux-image-5.15.0-1100-oracleUpgrade linux-image-5.15.0-173-genericUpgrade linux-image-5.15.0-1086-gkeopUpgrade linux-image-awsUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-aws-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1099-gkeUpgrade linux-image-nvidia-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-oem-6.17Upgrade linux-image-raspi-6.8Upgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1103-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1103-gcpUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1098-intel-iotgUpgrade linux-image-5.15.0-1102-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-6.17Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-6.17.0-1013-azureUpgrade linux-image-5.15.0-1103-aws-64kUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1094-intel-iot-realtimeUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-5.15.0-1103-aws-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1044-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1055-nvidia-tegraUpgrade linux-image-ibm-5.15Upgrade linux-image-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1020-oemUpgrade linux-image-6.17.0-1012-awsUpgrade linux-image-5.15.0-173-lowlatencyUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-5.15.0-1098-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-intelUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-5.15.0-173-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-173-generic-64kUpgrade linux-image-5.15.0-1055-nvidia-tegra-rtUpgrade linux-image-generic-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-generic-6.17Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1097-ibmUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-5.15.0-1095-kvmUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-5.15.0-1044-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15 | Mar 17, 2026 | Jan 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub