Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-22980

In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memory being accessed after it was freed - reclaim_str_hashtbl in particularly. We cannot hold nfsd_mutex across the nfsd4_end_grace() call as that is held while client_tracking_op->init() is called and that can wait for an upcall to nfsdcltrack which can write to v4_end_grace, resulting in a deadlock. nfsd4_end_grace()
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:aaee1e31614e9fdd088cbbd43baad90dcb91bd91f2fdee62aeb34b48e598929e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 7 assertions

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/3

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/nfsd/netns.h","fs/nfsd/nfs4state.c","fs/nfsd/nfsctl.c","fs/nfsd/state.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.18"},{"lessThan":"3.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected",…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/nfsd/netns.h","fs/nfsd/nfs4state.c","fs/nfsd/nfsctl.c","fs/nfsd/state.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ca97360860eb02e3ae4ba42c19b439a0fcecbf06","status":"affected","version":"7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6","versionType":"git"},{"lessThan":"e8bfa2401d4c51eca6e48e9b33c798828ca9df61","status":"affected","version":"7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6","versionType":"git"},{"lessThan":"34eb22836e0cdba093baac66599d68c4cd245a9d","s…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/1

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/2

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/4

Affected products and versions

7 source assertions
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/3
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/nfsd/netns.h","fs/nfsd/nfs4state.c","fs/nfsd/nfsctl.c","fs/nfsd/state.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.18"},{"lessThan":"3.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected",…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/nfsd/netns.h","fs/nfsd/nfs4state.c","fs/nfsd/nfsctl.c","fs/nfsd/state.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ca97360860eb02e3ae4ba42c19b439a0fcecbf06","status":"affected","version":"7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6","versionType":"git"},{"lessThan":"e8bfa2401d4c51eca6e48e9b33c798828ca9df61","status":"affected","version":"7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6","versionType":"git"},{"lessThan":"34eb22836e0cdba093baac66599d68c4cd245a9d","s…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/1
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/2
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/affected/4

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/adp/1/references/0
{"url":"https://git.kernel.org/stable/c/06600719d0f7a723811c45e4d51f5b742f345309"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/2857bd59feb63fcf40fe4baf55401baea6b4feb4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/34eb22836e0cdba093baac66599d68c4cd245a9d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/53f07d095e7e680c5e4569a55a019f2c0348cdc6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/ba4811c8b433bfa681729ca42cc62b6034f223b0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/ca97360860eb02e3ae4ba42c19b439a0fcecbf06"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/e8bfa2401d4c51eca6e48e9b33c798828ca9df61"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ff0b06300bb4baae5999f2ecee51f7fc31e84e0568add614cce7b069259fd217 · sha256:d235a3b793227616… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer