Infinite Loop Vulnerability in Linux Kernel NFSD

CVE-2026-64519

What is CVE-2026-64519?

A vulnerability in the Linux Kernel's NFSD component can lead to an infinite loop during layout state revocation. The function find_one_sb_stid() bypasses state identifiers with a non-zero status. However, in the case of SC_TYPE_LAYOUT, the state status is not set prior to invoking nfsd4_close_layout(), resulting in a retry loop that continuously identifies the same layout state identifier. This behavior causes the revocation process to hang indefinitely, affecting system performance and stability.

References