Vulnerability in Linux Kernel Affecting NFSD Functionality

CVE-2026-53398

What is CVE-2026-53398?

In the Linux kernel, an issue has been identified in the NFSD (Network File System Daemon) related to the SECINFO_NO_NAME decoding process. Specifically, if the XDR (External Data Representation) stream is truncated, an existing operation may leave stale data in a union within the structure. This occurs because the sin_exp variable is not properly initialized before an error response, potentially causing unexpected behaviors when handling decoded information. A fix has been implemented to ensure proper initialization, aligning with best practices for the management of decoding states.

References