nfsd: fix nfsd_file leak on inter-server COPY setup failure (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.74 % · percentile 55 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() fails, nfsd4_copy() returns nfserr_offload_denied directly, bypassing the out: label where release_copy_files() would drop the nf_dst reference taken by nfs4_preprocess_stateid_op(). Each failed inter-server COPY leaks one nfsd_file, pinning file/inode/dentry/vfsmount. Fix by setting status and jumping to out: instead of returning directly.
References
- https://git.kernel.org/stable/c/d15f76fddc5d0215db5f18851048376a1ea79bd6
- https://git.kernel.org/stable/c/eb22420e5bd6eb3afa1f840036bb08a7ac90db76
- https://git.kernel.org/stable/c/94c28af6fd89cb204975e49b824f8ee521bb84e9
- https://git.kernel.org/stable/c/ab949252fdf102ae74329a0caa7995a849d0dafa
- https://git.kernel.org/stable/c/1a6a41b848455bf6ba2c9da2dfb0730e608ce7ab
- https://git.kernel.org/stable/c/424d5c95108a4809b832cb0a312c61de4aec0078
- https://git.kernel.org/stable/c/6ed8d6de7ec90c4ba84eb82673058f506e5777fd
- https://git.kernel.org/stable/c/88a76145451d703eedd867b5989bf73d17340399
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | Linux |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
European references
- ENISA EUVD · EUVD-2026-76592
- GCVE · GCVE-0-2026-89680
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1372 — Multiples vulnérabilités dans les produits SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1335 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ce0887ac96d35c7105090e166bb0807dc0a0e838 < d15f76fddc5d0215db5f18851048376a1ea79bd6 ; affected ce0887ac96d35c7105090e166bb0807dc0a0e838 < eb22420e5bd6eb3afa1f840036bb08a7ac90db76 ; affected ce0887ac96d35c7105090e166bb0807dc0a0e838 < 94c28af6fd89cb204975e49b824f8ee521bb84e9 ; affected ce0887ac96d35c7105090e166bb0807dc0a0e838 < ab949252fdf102ae74329a0caa7995a849d0dafa ; affected ce0887ac96d35c7105090e166bb0807dc0a0e838 < 1a6a41b848455bf6ba2c9da2dfb0730e608ce7ab ; affected ce0887ac96d35c7105090e166bb0807dc0a0e838 < 424d5c95108a4809b832cb0a312c61de4aec0078 |
| Linux · Linux | affected 5.6 ; unaffected 0 < 5.6 ; unaffected 5.10.273 ≤ 5.10.* ; unaffected 5.15.224 ≤ 5.15.* ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |