CVE-2026-53026: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg
In the Linux kernel, the following vulnerability has been resolved:
NFSD: fix nfs4file access extra count in nfsd4addrdaccesstowrdeleg
In nfsd4addrdaccesstowrdeleg, if fp->fifds[ORDONLY] is already set by another thread, nfs4filegetaccess should not be called to increment the nfs4file access count since that was already done by the thread that added READ access to the file. The extra fiaccess count in nfs4file can prevent the corresponding nfsdfile from being freed.
When stopping nfs-server service, these extra access counts trigger a BUG in kmemcachedestroy() that shows nfsdfile object remaining on kmemcacheshutdown.
This problem can be reproduced by running the Git project's test suite over NFS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53026?
CVE-2026-53026 has a risk rating of 23, indicating a significant vulnerability.
How do I fix CVE-2026-53026?
To fix CVE-2026-53026, update your Linux kernel to the patched version that addresses this vulnerability.
What type of vulnerability is CVE-2026-53026?
CVE-2026-53026 is a kernel vulnerability related to the NFS server's handling of file access counting.
Which software is affected by CVE-2026-53026?
CVE-2026-53026 affects the Linux kernel specifically through its NFS daemon functionality.
Can CVE-2026-53026 be exploited remotely?
Yes, CVE-2026-53026 can potentially be exploited to impact NFS file access, which could be initiated by remote users.