7.5

CVE-2026-89685

nfsd: fix clock domain mismatch in clients_still_reclaiming()

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix clock domain mismatch in clients_still_reclaiming()

clients_still_reclaiming() computes a deadline from nn->boot_time
(CLOCK_REALTIME, ~1.7 billion) but compares it against
ktime_get_boottime_seconds() (CLOCK_BOOTTIME, seconds since boot).
The comparison is always false — it would take ~54 years of uptime
for BOOTTIME to exceed the REALTIME-derived deadline.

This means any client can hold the server in grace indefinitely by
sending CLAIM_PREVIOUS OPEN requests, blocking all non-reclaim
operations for all other clients.

Add boot_time_bt (CLOCK_BOOTTIME) alongside the existing boot_time
and use it for the deadline computation. boot_time (CLOCK_REALTIME)
is preserved for its cl_boot clientid-nonce role.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 20b7d86f29d39e8ae19bb29c24ffee70dc385ddf
Version < e92e80c5b043108029bc729b30d12c37158fb9cb
Status affected
Version 20b7d86f29d39e8ae19bb29c24ffee70dc385ddf
Version < f9cec313efb2fd18d962aad738a4892bce806016
Status affected
Version 20b7d86f29d39e8ae19bb29c24ffee70dc385ddf
Version < 9843649196221152b6e5d138a3ce859bdaae1d96
Status affected
Version 20b7d86f29d39e8ae19bb29c24ffee70dc385ddf
Version < 09ea3eb9a518565f5bca386e81b993ed8825f5e8
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.6
Status affected
Version 0
Version < 5.6
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.365
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/f9cec313efb2fd18d962aad738a4892bce806016
https://git.kernel.org/stable/c/9843649196221152b6e5d138a3ce859bdaae1d96
https://git.kernel.org/stable/c/09ea3eb9a518565f5bca386e81b993ed8825f5e8
https://git.kernel.org/stable/c/e92e80c5b043108029bc729b30d12c37158fb9cb