CVE-2026-64519 PUBLISHED

NFSD: Fix infinite loop in layout state revocation

Assigner: Linux
Reserved: 19.07.2026 Published: 25.07.2026 Updated: 25.07.2026

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix infinite loop in layout state revocation

find_one_sb_stid() skips stids whose sc_status is non-zero, but the SC_TYPE_LAYOUT case in nfsd4_revoke_states() never sets sc_status before calling nfsd4_close_layout(). The retry loop therefore finds the same layout stid on every iteration, hanging the revoker indefinitely.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1e33e1414bec54a4feafa9e67e2617031be0afe2 to d1fc00ec02e9deb3f8d2bd59caf938c554fbc576 (excl.)
  • affected from 1e33e1414bec54a4feafa9e67e2617031be0afe2 to fe59ae27d7346245f5d8d97220f374e63efd28b5 (excl.)
  • affected from 1e33e1414bec54a4feafa9e67e2617031be0afe2 to 44e5e4eb3a07bf3e1d931dd9f96f3edcfa376605 (excl.)
  • affected from 1e33e1414bec54a4feafa9e67e2617031be0afe2 to 4f8ef58c10bfe5f86a643c7c8331b37e69e3dae1 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.9 is affected
  • unaffected from 0 to 6.9 (excl.)
  • unaffected from 6.12.92 to 6.12.* (incl.)
  • unaffected from 6.18.34 to 6.18.* (incl.)
  • unaffected from 7.0.11 to 7.0.* (incl.)
  • unaffected from 7.1 to * (incl.)

References