In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt to kill all rpc_ta…
Critical CVSS 9.8
Summary
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt to kill all rpc_task even umount operation may ultimately fail if some files remain open. Consequently, if an action attempts to open a file, it can potentially send two rpc_task to nfs server. NFS CLIENT thread1 thread2 open("file") ... nfs4_do_open _nfs4_do_open _n…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0ab0a3ad24e970e894abcac58f85c332d1726749 Patch
- https://git.kernel.org/stable/c/2d505a801e57428057563762f67a5a62009b2600 Patch
- https://git.kernel.org/stable/c/37dfc81266d3a32294524bfadd3396614f8633ee Patch
- https://git.kernel.org/stable/c/45abb68c941ebc9a35c6d3a7b08196712093c636 Patch
- https://git.kernel.org/stable/c/6f73f920b7ad0084373e46121d7ac34117aed652 Patch
- https://git.kernel.org/stable/c/98100e88dd8865999dc6379a3356cd799795fe7b Patch
- https://git.kernel.org/stable/c/a85364f0d30dee01c5d5b4afa55a9629a8f36d8e Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD