In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode pnfs_set_layoutcommit relies on the lseg refcount to keep the layout around. Need to clear NFS_INO_LAYOUTCOMMIT otherwise we might attempt to reference a null layout.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.5NVD modified 2026-10-15 02:18
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 10
- https://git.kernel.org/stable/c/084bebe82ad86f718a3af84f34761863e63164ed
- https://git.kernel.org/stable/c/104080582ae0aa6dce6c6d75ff89062efe84673b
- https://git.kernel.org/stable/c/38694f9aae00459ab443a7dc8b3949a6b33b560a
- https://git.kernel.org/stable/c/59947dff0fb7c19c09ce6dccbcd253fd542b6c25
- https://git.kernel.org/stable/c/b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc
- https://git.kernel.org/stable/c/ca2e7fdad7c683b64821c94a58b9b68733214dad
- https://git.kernel.org/stable/c/e0f8058f2cb56de0b7572f51cd563ca5debce746
- https://git.kernel.org/stable/c/f718f9ea6094843b8c059b073af49ad61e9f49bb
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html