Vulnerability in Linux

CVE-2026-64519

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation find_one_sb_stid() skips stids whose sc_status is non-zero, but the SC_TYPE_LAYOUT case in nfsd4_revoke_states() never sets sc_status before calling nfsd4_close_layout(). The retry loop therefore finds the same layout stid on every iteration, hanging the revoker indefinitely.

EPSS: 0.002 (6.4th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 1e33e1414bec54a4feafa9e67e2617031be0afe2, 6.9, 0

References