THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-53398 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before si

[NVD] CVE-2026-53398 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before si

mednvdPublished 2026-07-19

CVE-2026-53398 CVSS: 9.8 CRITICAL Published: 2026-07-19T12:16:50.933

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix SECINFO_NO_NAME decode error cleanup

nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sin_exp is initialized.

Since commit 3fdc54646234 (

Indicators of compromise

CVE-2026-53398cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-53398