Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-53398: Linux NFS server can mis-handle truncated requests
CVE-2026-53398 · published 2 months ago
Summary
The NFS server component in several Linux distributions may incorrectly process incomplete network messages, leaving old data in memory. This can cause the server to behave unexpectedly or crash. Updating the system to the latest kernel version resolves the issue.
What to do
- Update debian linux-6.1 to version 6.1.177-1~deb11u1.
- Update linux kernel to version 7.1.3.
- Update debian linux to version 6.1.177-1.
- Update debian linux to version 6.12.95-1.
- Update debian linux to version 7.1.3-1.
- Update debian rootio-linux to version 5.10.259-1.root.io.112.
- Update canonical linux to version 5.15.0-187.197.aikido.112.
- Update canonical rootio-linux to version 5.15.0-187.197.aikido.112.
- Update canonical linux-hwe-5.15 to version 5.15.0-194.204~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1110.114~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-194.204~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1110.114~20.04.1.
- Update canonical linux-aws to version 5.15.0-1116.123.
- Update canonical linux-azure to version 5.15.0-1122.131.
- Update canonical linux-azure-fde to version 5.15.0-1121.130.
- Update canonical linux-gcp to version 5.15.0-1117.127.
- Update canonical linux-gke to version 5.15.0-1112.118.
- Update canonical linux-gkeop to version 5.15.0-1099.107.
- Update canonical linux-ibm to version 5.15.0-1110.114.
- Update canonical linux-intel-iotg to version 5.15.0-1111.117.
- Update canonical linux-kvm to version 5.15.0-1108.113.
- Update canonical linux-lowlatency to version 5.15.0-194.204.
- Update canonical linux-oracle to version 5.15.0-1113.119.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1079.83.
- Update canonical linux-bluefield to version 5.15.0-1100.102.
- Update canonical linux-aws-fips to version 5.15.0-1116.123+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1122.131+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1116.126+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1108.110.
- Update canonical linux-realtime to version 5.15.0-1115.124.
- Update canonical linux-aws-7.0 to version 7.0.0-1012.12~24.04.1.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-hwe-7.0 to version 7.0.0-31.31~24.04.1.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1018.18~24.04.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1035.38.
- Update canonical linux-riscv-7.0 to version 7.0.0-31.31.1~24.04.1.
- Update canonical linux to version 7.0.0-31.31.
- Update canonical linux-aws to version 7.0.0-1012.12.
- Update canonical linux-azure to version 7.0.0-1014.14.
- Update canonical linux-gcp to version 7.0.0-1011.11.
- Update canonical linux-gke to version 7.0.0-1006.7.
- Update canonical linux-ibm to version 7.0.0-1013.13.
- Update canonical linux-nvidia to version 7.0.0-1018.18.
- Update canonical linux-nvidia-bos to version 7.0.0-2018.18.
- Update canonical linux-oem-7.0 to version 7.0.0-1013.13.
- Update canonical linux-oracle to version 7.0.0-1011.11.
- Update canonical linux-raspi to version 7.0.0-1019.19.
- Update canonical linux-realtime to version 7.0.0-31.31.1.
- Update canonical linux-riscv to version 7.0.0-31.31.1.
- Update canonical linux-aws-5.15 to version 5.15.0-1116.123~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1122.131~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1121.130~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1111.117~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1068.70~20.04.1.
- Update canonical linux to version 5.15.0-194.204.
- Update canonical linux-nvidia to version 5.15.0-1111.112.
- Update canonical linux-nvidia-tegra to version 5.15.0-1068.70.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1057.57.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux linux to version 8836405abdc53ca3dd5fc68b2cf6f8f012fad011 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1116.123~20.04.1 Fix: upgrade to 5.15.0-1116.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1122.131~20.04.1 Fix: upgrade to 5.15.0-1122.131~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1121.130~20.04.1 Fix: upgrade to 5.15.0-1121.130~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-194.204~20.04.1 Fix: upgrade to 5.15.0-194.204~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1110.114~20.04.1 Fix: upgrade to 5.15.0-1110.114~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1111.117~20.04.1 Fix: upgrade to 5.15.0-1111.117~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-194.204~20.04.1 Fix: upgrade to 5.15.0-194.204~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1068.70~20.04.1 Fix: upgrade to 5.15.0-1068.70~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
Showing 50 of 188. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1110.114~20.04.1 Fix: upgrade to 5.15.0-1110.114~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-194.204 Fix: upgrade to 5.15.0-194.204
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1116.123 Fix: upgrade to 5.15.0-1116.123
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1110.114 Fix: upgrade to 5.15.0-1110.114
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1111.117 Fix: upgrade to 5.15.0-1111.117
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1108.113 Fix: upgrade to 5.15.0-1108.113
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-194.204 Fix: upgrade to 5.15.0-194.204
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1111.112 Fix: upgrade to 5.15.0-1111.112
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1068.70 Fix: upgrade to 5.15.0-1068.70
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1057.57 Fix: upgrade to 5.15.0-1057.57
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1113.119 Fix: upgrade to 5.15.0-1113.119
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1079.83 Fix: upgrade to 5.15.0-1079.83
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1100.102 Fix: upgrade to 5.15.0-1100.102
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1116.123+fips1 Fix: upgrade to 5.15.0-1116.123+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1122.131+fips1 Fix: upgrade to 5.15.0-1122.131+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1116.126+fips1 Fix: upgrade to 5.15.0-1116.126+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 |
< 7.0.0-1012.12~24.04.1 Fix: upgrade to 7.0.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-31.31~24.04.1 Fix: upgrade to 7.0.0-31.31~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1018.18~24.04.1 Fix: upgrade to 7.0.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-31.31.1~24.04.1 Fix: upgrade to 7.0.0-31.31.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2018.18 Fix: upgrade to 7.0.0-2018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Debian:11 | debian | linux-6.1 |
< 6.1.177-1~deb11u1 Fix: upgrade to 6.1.177-1~deb11u1
|
| – | linux | linux |
< 8836405abdc53ca3dd5fc68b2cf6f8f012fad011 6.1 |
| Linux | linux | kernel |
>= 6.13.0, < 7.1.3 Fix: upgrade to 7.1.3
|
| Debian:11 | debian | linux | All versions |
| Debian:12 | debian | linux |
< 6.1.177-1 Fix: upgrade to 6.1.177-1
|
| Debian:13 | debian | linux |
< 6.12.95-1 Fix: upgrade to 6.12.95-1
|
| Debian:14 | debian | linux |
< 7.1.3-1 Fix: upgrade to 7.1.3-1
|
| – | linux | linux_kernel |
>= 5.10.220, < 5.10.260 >= 5.15.154, < 5.15.211 >= 6.1, < 6.1.177 >= 6.2, < 6.6.144 >= 6.7, < 6.12.95 >= 6.13, < 6.18.38 >= 6.19, < 7.1.3 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Debian:11 | debian | rootio-linux |
< 5.10.259-1.root.io.112 Fix: upgrade to 5.10.259-1.root.io.112
|
| Root:Ubuntu:22.04 | canonical | linux |
< 5.15.0-187.197.aikido.112 Fix: upgrade to 5.15.0-187.197.aikido.112
|
| Root:Ubuntu:22.04 | canonical | rootio-linux |
< 5.15.0-187.197.aikido.112 Fix: upgrade to 5.15.0-187.197.aikido.112
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1122.131 Fix: upgrade to 5.15.0-1122.131
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1121.130 Fix: upgrade to 5.15.0-1121.130
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1117.127 Fix: upgrade to 5.15.0-1117.127
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1112.118 Fix: upgrade to 5.15.0-1112.118
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1099.107 Fix: upgrade to 5.15.0-1099.107
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1108.110 Fix: upgrade to 5.15.0-1108.110
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1115.124 Fix: upgrade to 5.15.0-1115.124
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-31.31 Fix: upgrade to 7.0.0-31.31
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1012.12 Fix: upgrade to 7.0.0-1012.12
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1006.7 Fix: upgrade to 7.0.0-1006.7
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1018.18 Fix: upgrade to 7.0.0-1018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1019.19 Fix: upgrade to 7.0.0-1019.19
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
Original advisory text
NFSD: Fix SECINFO_NO_NAME decode error cleanup
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix SECINFO_NO_NAME decode error cleanup
nfsd4_decode_secinfo_no_name() currently initializes sin_exp after
decoding sin_style. If the XDR stream is truncated, the decoder returns
nfserr_bad_xdr before sin_exp is initialized.
Since commit 3fdc54646234 ("NFSD: Reduce amount of struct
nfsd4_compoundargs that needs clearing"), the inline iops array is not
cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore
leave sin_exp holding stale union contents from a previous operation.
The error response path still invokes nfsd4_secinfo_no_name_release(),
which calls exp_put() on a non-NULL sin_exp.
Initialize sin_exp before the first failable decode step, matching
nfsd4_decode_secinfo().
NFSD: Fix SECINFO_NO_NAME decode error cleanup
nfsd4_decode_secinfo_no_name() currently initializes sin_exp after
decoding sin_style. If the XDR stream is truncated, the decoder returns
nfserr_bad_xdr before sin_exp is initialized.
Since commit 3fdc54646234 ("NFSD: Reduce amount of struct
nfsd4_compoundargs that needs clearing"), the inline iops array is not
cleared between RPC calls. A failed SECINFO_NO_NAME decode can therefore
leave sin_exp holding stale union contents from a previous operation.
The error response path still invokes nfsd4_secinfo_no_name_release(),
which calls exp_put() on a non-NULL sin_exp.
Initialize sin_exp before the first failable decode step, matching
nfsd4_decode_secinfo().
References
- https://security-tracker.debian.org/tracker/CVE-2026-53398 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-53398 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-53398 Third Party Advisory
- https://git.kernel.org/linus/9e18e83b8846a5c3fe13fc8a464b4865d33996c6 Third Party Advisory
- https://git.kernel.org/stable/c/161d1aaeb04d620d3692639700512bb5038c1e10 URL
- https://git.kernel.org/stable/c/1e04be34cafae119e82bcaccd6d28a20f72a3647 URL
- https://git.kernel.org/stable/c/46eb17d45be69d28c7a23ea03283b207426a8232 URL
- https://git.kernel.org/stable/c/49de5d31dd8fdebf78bdeaf196b0ca5cd5c75439 URL
- https://git.kernel.org/stable/c/5ec37edcb534f3fc92304be236d37f08e6545585 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53398... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-53398 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/8836405abdc53ca3dd5fc68b2cf6f8f012fad011 URL
- https://git.kernel.org/stable/c/9e18e83b8846a5c3fe13fc8a464b4865d33996c6 URL
- https://git.kernel.org/stable/c/c8a24effd96d4779e2ad779654682304491c55a5 URL
- https://ubuntu.com/security/notices/USN-8726-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8727-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8781-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8800-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8849-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-5 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.9
Critical
Timeline
Published19 Jul 2026
Updated9 Oct 2026
First seen19 Jul 2026
Sources
CVE-2026-53398 · NVD
CVE-2026-53398 · MITRE
CVE-2026-53398 · OSV
DEBIAN-CVE-2026-53398 · OSV
UBUNTU-CVE-2026-53398 · OSV
Track software like this
Free during beta