CVE Explorer

CVE-2026-45983

In the Linux kernel, the following vulnerability has been resolved: nfsd: never defer requests during idmap lookup During v4 request compound arg decoding, some ops (e.g. SETATTR) can trigger idmap lookup upcalls. When those upcall responses get delayed beyond the allowed time limit, cache_check() will mark the request for deferral and cause it to be dropped. This prevents nfs4svc_encode_compoundres from being executed, and thus the session slot flag NFSD4_SLOT_INUSE never gets cleared. Subse

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a966af8e7581c017671ce26573f23bc9dfe355668e07d354cd6e7ab59e06be1d

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/nfsd/nfs4idmap.c","fs/nfsd/nfs4proc.c","fs/nfsd/nfs4xdr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b9abb760db20504240a7147f27934d900cd80b23","status":"affected","version":"2f425878b6a71571341dcd3f9e9d1a6f6355da9c","versionType":"git"},{"lessThan":"3a72c7dedc99b321e0f267e4e999e5baf07c4593","status":"affected","version":"2f425878b6a71571341dcd3f9e9d1a6f6355da9c","versionType":"git"},{"lessThan":"99e17b20fddac19a228d213e00f6b9e1c10daff9","status":"affect…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/nfsd/nfs4idmap.c","fs/nfsd/nfs4proc.c","fs/nfsd/nfs4xdr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.30"},{"lessThan":"2.6.30","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/063a6f22478ef929625000a2caf54667725c1dfd"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/243f71ed873ff3feeb6f9b5cb145d63f7188b4c4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/3a72c7dedc99b321e0f267e4e999e5baf07c4593"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/8dff54fe88c0dcd4c55bff9fc2fa6ca968290826"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/99e17b20fddac19a228d213e00f6b9e1c10daff9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/b9abb760db20504240a7147f27934d900cd80b23"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/d75ec4504a4340b033b15cad0303988b3089dd93"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/f9c206cdc4266caad6a9a7f46341420a10f03ccb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7aefe5524b7c9460427eff9d13d1e1ec40cd9afbe48ecbb4f4db7e8412ba613d · sha256:eb0c56bc72759c8e… · /containers/cna/references/7

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer