Skip to content
Heist/ feed
UnratedFix available

NFSD: Fix infinite loop in layout state revocation

Type: advisorySource: OSV1 source record

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation find_one_sb_stid() skips stids whose sc_status is non-zero, but the SC_TYPE_LAYOUT case in nfsd4_revoke_states() never sets sc_status before calling nfsd4_close_layout(). The retry loop therefore finds the same layout stid on every iteration, hanging the revoker indefinitely.

Announced Source revision 1
Original source ↗

CVE-2026-64519

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:CVE-2026-64519

Kernel

Source reference: /affected/1/package/name

Affected versions
Not stated in this record
Fixed versions
6.12.92

Source reference: /affected/1/ranges

6.18.34

Source reference: /affected/1/ranges

7.0.11

Source reference: /affected/1/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "1e33e1414bec54a4feafa9e67e2617031be0afe2"
          },
          {
            "fixed": "d1fc00ec02e9deb3f8d2bd59caf938c554fbc576"
          },
          {
            "fixed": "fe59ae27d7346245f5d8d97220f374e63efd28b5"
          },
          {
            "fixed": "44e5e4eb3a07bf3e1d931dd9f96f3edcfa376605"
          },
          {
            "fixed": "4f8ef58c10bfe5f86a643c7c8331b37e69e3dae1"
          }
        ]
      }
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64519.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.9.0"
          },
          {
            "fixed": "6.12.92"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.13.0"
          },
          {
            "fixed": "6.18.34"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.19.0"
          },
          {
            "fixed": "7.0.11"
          }
        ]
      }
    ],
    "package": {
      "name": "Kernel",
      "ecosystem": "Linux"
    },
    "database_specific": {
      "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64519.json"
    }
  }
]
Related CVEs
CVE-2026-64519

Source reference: /id

Publisher severity

No explicit severity was provided.

Event
#50845 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement