THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-53392 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count ff_layout_alloc_lseg() decodes the filehandle-version array count from the flexfiles layout body. The value is used as the count for kzalloc_objs(), and the

[NVD] CVE-2026-53392 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count ff_layout_alloc_lseg() decodes the filehandle-version array count from the flexfiles layout body. The value is used as the count for kzalloc_objs(), and the

mednvdPublished 2026-07-19

CVE-2026-53392 CVSS: 7.5 HIGH Published: 2026-07-19T12:16:50.260

In the Linux kernel, the following vulnerability has been resolved:

NFSv4/flexfiles: reject zero filehandle version count

ff_layout_alloc_lseg() decodes the filehandle-version array count from the flexfiles layout body. The value is used as the count for kzalloc_objs(), and the current code only rejects NULL.

A zero count yields

Indicators of compromise

CVE-2026-53392cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-53392