-

CVE-2026-74730

NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

In the Linux kernel, the following vulnerability has been resolved:

NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

Dan Aloni reports that he was able to hit a use-after-free bug if a
FREE_STATEID operation gets delayed for whatever reason. Fix this by
bumping the refcount of the 'struct nfs_server' object for the duration
of the FREE_STATEID so it doesn't get cleaned up from underneath us
while operations are still in flight.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009
Version < ed2f92ce2fc48463c41e0e540b9a3454889e8af8
Status affected
Version 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009
Version < d858ab09e787106432d4d9830bad9dfedf02f890
Status affected
Version 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009
Version < af62f1af182d33a0de38308c012841885d8ab92e
Status affected
Version 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009
Version < caee6a68ffaa5016dfc01cd0b3dc1896a32e3abd
Status affected
Version 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009
Version < ed1161ab6239761958b38d5667225634fc2be894
Status affected
Version 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009
Version < d71dfffa512e71b166a889484e4c3b148a9a3af2
Status affected
Version 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009
Version < 80ed3d762628b36c9e4b22fac7c65b72ef3b13dd
Status affected
Version 7c1d5fae4a87d3cf3e9ffd68bcdbaf6529013009
Version < cf616096a0f3a2b60f7d68b6b39674a6867ded9c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.10
Status affected
Version 0
Version < 3.10
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.152
Status unaffected
Version <= 6.12.*
Version 6.12.104
Status unaffected
Version <= 6.18.*
Version 6.18.45
Status unaffected
Version <= 7.1.*
Version 7.1.9
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.127
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/80ed3d762628b36c9e4b22fac7c65b72ef3b13dd
https://git.kernel.org/stable/c/af62f1af182d33a0de38308c012841885d8ab92e
https://git.kernel.org/stable/c/caee6a68ffaa5016dfc01cd0b3dc1896a32e3abd
https://git.kernel.org/stable/c/cf616096a0f3a2b60f7d68b6b39674a6867ded9c
https://git.kernel.org/stable/c/d71dfffa512e71b166a889484e4c3b148a9a3af2
https://git.kernel.org/stable/c/d858ab09e787106432d4d9830bad9dfedf02f890
https://git.kernel.org/stable/c/ed1161ab6239761958b38d5667225634fc2be894
https://git.kernel.org/stable/c/ed2f92ce2fc48463c41e0e540b9a3454889e8af8