Description
In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy to attack. Anyway, it's easy to deal with - since xdr_encode_hyper() is just a call of put_unaligned_be64(), we can put that under ->d_lock and be done with that.
References (8)
Core 8
Core References
Scores
EPSS
0.0006
EPSS Percentile
18.3%
Details
Status
published
Products (25)
linux/Kernel
2.6.12 - 5.4.302linux
linux/Kernel
5.11.0 - 5.15.197linux
linux/Kernel
5.16.0 - 6.1.159linux
linux/Kernel
5.5.0 - 5.10.247linux
linux/Kernel
6.13.0 - 6.17.8linux
linux/Kernel
6.2.0 - 6.6.117linux
linux/Kernel
6.7.0 - 6.12.58linux
Linux/Linux
< 2.6.12
Linux/Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 40be5b9080114f18b0cea386db415b68a7273c1a
Linux/Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 504b3fb9948a9e96ebbabdee0d33966a8bab15cb
... and 15 more
Published
Dec 16, 2025
Tracked Since
Feb 18, 2026