THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-53399 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4_alloc_stid() publishes the new stid into cl->cl_stateids via idr_alloc_cyclic() under cl_lock before returning to nfsd4_alloc_layout_stateid(). When nfsd4_layo

[NVD] CVE-2026-53399 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4_alloc_stid() publishes the new stid into cl->cl_stateids via idr_alloc_cyclic() under cl_lock before returning to nfsd4_alloc_layout_stateid(). When nfsd4_layo

mednvdPublished 2026-07-19

CVE-2026-53399 CVSS: 9.8 CRITICAL Published: 2026-07-19T12:16:51.063

In the Linux kernel, the following vulnerability has been resolved:

nfsd: release layout stid on setlease failure

nfs4_alloc_stid() publishes the new stid into cl->cl_stateids via idr_alloc_cyclic() under cl_lock before returning to nfsd4_alloc_layout_stateid(). When nfsd4_layout_setlease() then fails, the error path frees the

Indicators of compromise

CVE-2026-53399cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-53399