-
CVE-2026-90148
- EPSS 0.2%
- Veröffentlicht 17.09.2026 16:06:42
- Zuletzt bearbeitet 17.09.2026 17:17:07
- Erkennungen
NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() When nfs4_add_lease() races with a delegation return, it calls nfs4_delete_lease() to clean up. Previously, it passed priv, which can legitimately be NULL. Passing a NULL priv eventually leads to a NULL pointer dereference in generic_setlease().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
e93a5e9306a576011f03011b492d4fbaa274477b
Version <
ff7244faa13b23e9acfad9df0438f0b44b338f62
Status
affected
Version
e93a5e9306a576011f03011b492d4fbaa274477b
Version <
d148a652d52fd6aee96daf798922eb800ebb3018
Status
affected
Version
e93a5e9306a576011f03011b492d4fbaa274477b
Version <
d179ff22cd8514f966966fd9ad425dcbb98e1ada
Status
affected
Version
e93a5e9306a576011f03011b492d4fbaa274477b
Version <
468e458ffde907ba19acd2102ca1fbb8f6fbede2
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
5.14
Status
affected
Version
0
Version <
5.14
Status
unaffected
Version <=
6.12.*
Version
6.12.110
Status
unaffected
Version <=
6.18.*
Version
6.18.52
Status
unaffected
Version <=
7.2.*
Version
7.2.6
Status
unaffected
Version <=
*
Version
7.3-rc1
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.102 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/ff7244faa13b23e9acfad9df0438f0b44b338f62
https://git.kernel.org/stable/c/d148a652d52fd6aee96daf798922eb800ebb3018
https://git.kernel.org/stable/c/d179ff22cd8514f966966fd9ad425dcbb98e1ada
https://git.kernel.org/stable/c/468e458ffde907ba19acd2102ca1fbb8f6fbede2